last executing test programs:

4m31.916198548s ago: executing program 2 (id=162):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280))
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/snmp6\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

4m31.44207547s ago: executing program 2 (id=169):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20)

4m31.157661493s ago: executing program 2 (id=173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020001000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000080c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0)

4m30.910167365s ago: executing program 2 (id=176):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x20)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x5876, 0x4)
recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x3}], 0x1, 0x10040, 0x0)

4m30.690998825s ago: executing program 2 (id=178):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4m30.446949847s ago: executing program 2 (id=181):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bind$bt_sco(r0, &(0x7f0000005680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

4m15.319819547s ago: executing program 32 (id=181):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bind$bt_sco(r0, &(0x7f0000005680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

2m42.939842006s ago: executing program 0 (id=850):
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @local}, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m41.892401026s ago: executing program 0 (id=865):
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00')

2m41.629061738s ago: executing program 0 (id=856):
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f00000008c0), 0x7, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)

2m40.407842335s ago: executing program 0 (id=873):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x1, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110)

2m40.0876269s ago: executing program 0 (id=866):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m39.788300834s ago: executing program 0 (id=869):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newneigh={0x30, 0x1c, 0x3e2eec8763589467, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r2, 0x4, 0x51, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x30}}, 0x0)

2m24.610432957s ago: executing program 33 (id=869):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newneigh={0x30, 0x1c, 0x3e2eec8763589467, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r2, 0x4, 0x51, 0xa}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010101}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x30}}, 0x0)

1m55.430771678s ago: executing program 4 (id=1105):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$eJzs281rXOUaAPDnnHy0vf1Ibm/vvbYWjBYhKCZNWrULN4qCSEVBFxVXMZmW0GkjSRRbik1F6kaQgq7Fpehf4E4UUVeCW924kkLRbtq6ipwz5+RjmkmbZjKnNr8fTOZ957wz53nO17znfScBbFoD2Z8kYkdE/BIRfY3q8gYDjafrV8+N37h6bjyJ+flX/kjydteunhsvm5bv215UBtOI9P2kWMlyM2fOnhyr12vTRX149tSbwzNnzj729qmxE7UTtdOjR44cPjTy5BOjj7clzyyva/vendq/9/nXLr04fuzSGz98mcW7o1i+NI92GcgS/3M+17zs4XavrGI7l5ST7goDYU26IiLbXT35+d8XXbG48/riufcqDQ7YUNl305bWi+fmgXtYElVHAFSj/KLP7n/LR4e6HneFK083boCyvK8Xj8aS7kiLNj1N97ftNBARx+b++jR7xAaNQwAALPXh+CdHeyPm+2588ULW9+hbWJLG//Ln3/K/u4o5lP6I+HdE7I6I/0TEnoj4b0Te9v8Rcd8647m5/5NeXudHrirr/z1VzG0t7/+Vvb/o7ypqO/P8e5Ljk/XawWKbDEbPlqw+sso6vn72549aLVva/8se2frLvmARx+XupgG6ibHZsbxT2gZXLkTs614p/2RhJiCJiL0RsW9tH72rLEw+8vn+Vo1unf8q2jDPNP9Zlt5clv9cNOVfSpbOT07eND85vDXqtYPD5VFxc4Q//nTx5VbrX1f+bXCl1nhesv+bm/QnixujNj2z9nVc/PWDlvc0d3j8p73Jq/k8c2/x2jtjs7PTIxG9ydG8vuz10cX3lvWyfXb8Dx5Y+fzfXbwnS/7+iNi/eE2IB4rYH4yIhyLiwCr5f/9M62Vl/pFWtP8vREyseP1bOP6z/V/M1yfJ9MLE/e0Xuk5+91Wr9d/e/j+clwaLV/Lr3y2sFE52MjYHuJ5tBwAAAP8Uaf4b+CQdWiin6dBQ4zf8e+JfaX1qZvbR41NvnZ5o/Fa+P3rScqSrrxgPrU/WayPJXPGJjfHR0WKsuBwvPVSMG3/ctS2vD41P1Scqzh02u+0tzv/M711VRwdssG0rvjra2/FAgAo0z6Ony6vnXwoXA7hX+X9t2Lxucf6nnYoD6LzuVautvb4BsQCdtdIJf76pbi4A7k3u/2Hzcv7DJpV+U3UEQIV8/8OmdAf/zt+JwtbpmW/v7gg3sLDWlLujgxFGlIW08g2lsIGFii9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfJ3AAAA//9Uv+Io")
r1 = openat(r0, &(0x7f0000000680)='./file0\x00', 0x4c8c2bb75bdfc39a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x3d, 0x6, 0x0, 0x6, 0x4})
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="c28b0cfa", 0x4}], 0x1)

1m54.354866798s ago: executing program 4 (id=1110):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000300)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))

1m53.138415005s ago: executing program 4 (id=1114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x13c4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0)

1m52.510387245s ago: executing program 4 (id=1118):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)="00000000090209000101000000402505a0a400010000000196a085e756fbb8", 0x1f)

1m52.078271095s ago: executing program 4 (id=1121):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m51.622601937s ago: executing program 4 (id=1126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000003000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m36.427095531s ago: executing program 34 (id=1126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000003000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

38.796170407s ago: executing program 1 (id=1482):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)="ffdd", 0x2)

38.397729046s ago: executing program 1 (id=1487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)=',123', 0x4)

38.025773433s ago: executing program 1 (id=1491):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

37.65575954s ago: executing program 1 (id=1494):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@resgid}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
llistxattr(&(0x7f0000000300)='./bus\x00', 0x0, 0x0)

36.451146777s ago: executing program 1 (id=1502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

33.115058594s ago: executing program 1 (id=1520):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}]}})

32.577404889s ago: executing program 35 (id=1520):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}]}})

9.36302442s ago: executing program 6 (id=1641):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000a00000008000600776c630008000900640000000c00070000000000000000000800050000000000080008"], 0x4c}}, 0x0)
syz_emit_ethernet(0x3f, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x9, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[@fragment={0x84, 0x0, 0x8, 0x1, 0x0, 0x0, 0x68}], 'M'}}}}}, 0x0)

7.921473317s ago: executing program 6 (id=1648):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rename(&(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002440)='./bus/file0\x00')

5.94567386s ago: executing program 6 (id=1658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)='+ 0 0 1 1 0\n', 0xc)

4.88495284s ago: executing program 6 (id=1664):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000009000400"})

4.513456867s ago: executing program 7 (id=1667):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd00, &(0x7f0000000000)="0400")

4.207847351s ago: executing program 7 (id=1668):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

3.702900166s ago: executing program 6 (id=1671):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000940)={0x13, 0x10, 0xfa00, {0x0}}, 0x18)
link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.065670046s ago: executing program 3 (id=1674):
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1000419, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x101, 0x7, 0x10, 0x0, 0x7, 0x8})

3.044894886s ago: executing program 5 (id=1675):
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
brk(0x2000000db002)

2.904440713s ago: executing program 7 (id=1676):
pipe(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

2.563022949s ago: executing program 5 (id=1677):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000100), 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000)

2.33467478s ago: executing program 3 (id=1678):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="36d5987e3d1b"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0)

2.33317207s ago: executing program 7 (id=1679):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xff00}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0)

2.292383601s ago: executing program 8 (id=1521):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_FGETXATTR={0x2b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000034c0), 0x0, 0x0, 0x1})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

1.955107008s ago: executing program 5 (id=1680):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, 0x58}, 0x48)

1.878454711s ago: executing program 8 (id=1681):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c)
recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1}, 0xd}, {{0x0, 0x0, 0x0}, 0x8a}], 0x2, 0x10140, 0x0)

1.527902737s ago: executing program 3 (id=1682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)='r', 0x1)

1.459601181s ago: executing program 5 (id=1683):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
sendmmsg$inet_sctp(r0, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006007d02"], 0x20, 0x4c004}], 0x1, 0x10)

1.367066255s ago: executing program 8 (id=1684):
utimes(0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x1, 0x1e7, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
readahead(r0, 0x6, 0x0)

1.078012359s ago: executing program 3 (id=1685):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

955.115235ms ago: executing program 5 (id=1686):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x209, 0x70bd27, 0x800, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000091)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

864.171669ms ago: executing program 7 (id=1687):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r0, &(0x7f0000000230)='0x0', 0x3)

645.512119ms ago: executing program 3 (id=1688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001080)=ANY=[@ANYBLOB="38020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)

455.723768ms ago: executing program 5 (id=1689):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="013030303030302032303030303030303030202d", 0x14)

372.646672ms ago: executing program 7 (id=1690):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0xb003})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

332.929604ms ago: executing program 6 (id=1691):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}, 0x0, 0x84})

120.887384ms ago: executing program 3 (id=1692):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)

0s ago: executing program 8 (id=1693):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x8000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000005840)={0x3, 0x0, 0x98, &(0x7f0000005780)={0x4, 0xfffffffffffff7f6, 0xc}})

kernel console output (not intermixed with test programs):

6-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config
[  214.906190][ T6255] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 194, using maximum allowed: 30
[  214.978208][ T6255] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 194
[  215.075262][ T6255] usb 6-1: config 1 interface 1 has no altsetting 0
[  215.102431][ T6255] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00
[  215.127365][ T6255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.392690][ T6255] usb 6-1: selecting invalid altsetting 0
[  215.604204][ T6255] usb 6-1: string descriptor 0 read error: -71
[  215.658037][ T6255] usb 6-1: USB disconnect, device number 3
[  217.092525][ T4330] kernel write not supported for file /ppp (pid: 4330 comm: kworker/0:6)
[  217.515601][ T6845] block2mtd: illegal erase size
[  218.689320][ T6870] loop1: detected capacity change from 0 to 2048
[  218.836017][ T6870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.118057][ T6876] loop4: detected capacity change from 0 to 1024
[  219.418851][ T6883] loop1: detected capacity change from 0 to 512
[  219.480098][ T4330] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  219.589356][ T6885] No buffer was provided with the request
[  219.694230][ T4330] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  219.778070][ T4330] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  219.834498][ T4330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  219.878722][ T4330] usb 6-1: SerialNumber: syz
[  220.236197][ T6893] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.894'.
[  220.494526][ T6899] loop1: detected capacity change from 0 to 16
[  220.543491][ T4330] cdc_ether: probe of 6-1:1.0 failed with error -22
[  220.583449][ T6899] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300)
[  220.752002][ T4330] usb 6-1: USB disconnect, device number 4
[  221.129034][ T6909] loop4: detected capacity change from 0 to 256
[  221.157437][ T6909] exfat: Deprecated parameter 'utf8'
[  221.183153][ T6909] exfat: Deprecated parameter 'utf8'
[  221.221169][ T6909] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  221.340010][ T4330] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  221.551991][ T4330] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.645575][ T4330] usb 2-1: config 0 interface 0 has no altsetting 0
[  221.709941][ T4330] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00
[  221.779722][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.839380][ T4330] usb 2-1: config 0 descriptor??
[  222.090212][ T6924] netlink: 'syz.4.909': attribute type 6 has an invalid length.
[  222.151380][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'.
[  222.309149][ T4330] hid_mf 0003:0079:1803.0004: unknown main item tag 0x3
[  222.347815][ T4330] hid_mf 0003:0079:1803.0004: No inputs registered, leaving
[  222.407171][ T4330] hid_mf 0003:0079:1803.0004: hidraw0: USB HID v0.04 Joystick [HID 0079:1803] on usb-dummy_hcd.1-1/input0
[  222.647860][ T4330] hid_mf 0003:0079:1803.0004: Missing input, this should never happen!
[  222.686878][ T4330] hid_mf 0003:0079:1803.0004: Force feedback init failed.
[  222.747606][ T4330] usb 2-1: USB disconnect, device number 8
[  223.027935][ T6937] loop4: detected capacity change from 0 to 512
[  223.161894][ T6937] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  223.264469][ T6937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  223.276267][ T6933] fido_id[6933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  223.325076][ T6937] EXT4-fs (loop4): orphan cleanup on readonly fs
[  223.365631][ T6937] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.916: bad orphan inode 3
[  223.387256][ T6942] loop5: detected capacity change from 0 to 2048
[  223.448626][ T6937] EXT4-fs (loop4): Remounting filesystem read-only
[  223.472343][ T6942]  loop5: p3 < >
[  223.486614][ T6937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  223.510146][ T3638]  loop5: p3 < >
[  223.595310][ T6937] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.916: dx entry: limit 0 != root limit 125
[  223.671074][ T6937] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.916: Corrupt directory, running e2fsck is recommended
[  223.854123][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  224.245989][ T6948] ptp ptp0: new virtual clock ptp1
[  224.282327][ T6948] ptp ptp0: guarantee physical clock free running
[  224.453159][ T6953] loop5: detected capacity change from 0 to 256
[  224.602809][ T6953] FAT-fs (loop5): Directory bread(block 64) failed
[  224.609387][ T6953] FAT-fs (loop5): Directory bread(block 65) failed
[  224.640219][ T6955] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  224.702846][ T6957] input: syz1 as /devices/virtual/input/input11
[  224.711640][ T6953] FAT-fs (loop5): Directory bread(block 66) failed
[  224.718186][ T6953] FAT-fs (loop5): Directory bread(block 67) failed
[  224.730100][ T6955] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  224.795110][ T6955] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  224.830440][ T6953] FAT-fs (loop5): Directory bread(block 68) failed
[  224.877756][ T6955] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  224.890836][ T6953] FAT-fs (loop5): Directory bread(block 69) failed
[  224.897482][ T6953] FAT-fs (loop5): Directory bread(block 70) failed
[  224.950301][ T6955] page dumped because: unmovable page
[  224.971975][ T6955] page_owner info is not present (never set?)
[  224.979708][ T6953] FAT-fs (loop5): Directory bread(block 71) failed
[  225.052217][ T6953] FAT-fs (loop5): Directory bread(block 72) failed
[  225.135790][ T6953] FAT-fs (loop5): Directory bread(block 73) failed
[  225.434732][ T6967] program syz.3.928 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  225.709236][ T6971] loop1: detected capacity change from 0 to 2048
[  225.804189][ T6971]  loop1: p3 < >
[  225.843728][ T3638]  loop1: p3 < >
[  226.105038][ T4284] __loop_clr_fd: partition scan of loop1 failed (rc=-16)
[  226.125021][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  226.185201][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.271321][ T5295] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  226.339513][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.429925][ T5295] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  226.500788][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.603227][ T5295] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  226.654981][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.740588][ T5295] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  226.806688][ T5295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.918824][ T5295] Buffer I/O error on dev loop1p3, logical block 0, async page read
[  227.150975][ T6998] input: syz0 as /devices/virtual/input/input12
[  227.167598][ T6997] loop5: detected capacity change from 0 to 2048
[  227.254726][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  227.334479][ T7000] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.663852][ T7004] netlink: 'syz.4.944': attribute type 6 has an invalid length.
[  227.929634][ T6986] loop1: detected capacity change from 0 to 32768
[  228.108943][ T6986] XFS (loop1): Mounting V5 Filesystem
[  228.127785][ T7010] loop4: detected capacity change from 0 to 2048
[  228.160487][ T7019] netlink: 'syz.3.949': attribute type 29 has an invalid length.
[  228.196167][ T6986] XFS (loop1): Ending clean mount
[  228.255184][ T7019] netlink: 'syz.3.949': attribute type 29 has an invalid length.
[  228.308406][ T7010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  228.366977][ T7027] netlink: 'syz.3.949': attribute type 29 has an invalid length.
[  228.383810][ T7010] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.441294][ T7019] netlink: 'syz.3.949': attribute type 29 has an invalid length.
[  228.584910][ T4284] XFS (loop1): Unmounting Filesystem
[  228.795274][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  231.237098][ T7068] loop1: detected capacity change from 0 to 32768
[  231.271224][ T7068] XFS: attr2 mount option is deprecated.
[  231.326696][ T7068] XFS (loop1): Mounting V5 Filesystem
[  231.433346][ T7068] XFS (loop1): Ending clean mount
[  231.452222][ T7068] XFS (loop1): Quotacheck needed: Please wait.
[  231.541868][ T7068] XFS (loop1): Quotacheck: Done.
[  231.661892][ T4284] XFS (loop1): Unmounting Filesystem
[  232.517027][ T7092] vxcan1: tx address claim with dest, not broadcast
[  232.834945][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.977'.
[  233.290856][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  233.304486][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  233.313111][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  233.322270][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  233.329669][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  233.339970][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  233.458658][ T7106] program syz.3.979 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.744391][   T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.033041][   T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.287192][   T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.333300][ T7123] loop1: detected capacity change from 0 to 4096
[  234.343094][ T7125] loop5: detected capacity change from 0 to 4096
[  234.388598][ T7123] EXT4-fs: Ignoring removed orlov option
[  234.490980][ T7128] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.503782][ T7125] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  234.547887][ T7123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  234.636705][ T7125] NILFS (loop5): mounting fs with errors
[  234.655311][   T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.048700][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  235.287849][ T7102] chnl_net:caif_netlink_parms(): no params data found
[  235.410118][ T4288] Bluetooth: hci2: command 0x0409 tx timeout
[  235.447572][ T7116] loop4: detected capacity change from 0 to 32768
[  235.514720][ T7139] loop5: detected capacity change from 0 to 512
[  235.598991][ T7116] XFS (loop4): Mounting V5 Filesystem
[  235.696063][ T7139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  235.767093][ T7141] loop3: detected capacity change from 0 to 4096
[  235.791408][ T7139] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.814523][ T7116] XFS (loop4): Ending clean mount
[  235.910515][ T7141] EXT4-fs: inline encryption not supported
[  236.027427][ T7141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  236.128196][ T7141] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  236.227885][ T7141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  236.329565][ T4280] XFS (loop4): Unmounting Filesystem
[  236.347233][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  236.375305][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.450191][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.560831][ T7102] device bridge_slave_0 entered promiscuous mode
[  236.675424][ T7164] overlayfs: failed index dir cleanup (-512)
[  236.813305][ T7164] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  236.876127][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.899938][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.000066][ T7102] device bridge_slave_1 entered promiscuous mode
[  237.027898][ T7172] netlink: 'syz.1.995': attribute type 10 has an invalid length.
[  237.137083][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  237.313728][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  237.387902][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.467202][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.490028][ T4288] Bluetooth: hci2: command 0x041b tx timeout
[  237.547396][ T7173] device bridge_slave_0 left promiscuous mode
[  237.635811][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.711469][ T7173] device bridge_slave_1 left promiscuous mode
[  237.831359][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.870244][ T7173] bond0: (slave bond_slave_0): Releasing backup interface
[  237.894286][ T7181] loop4: detected capacity change from 0 to 4096
[  237.926357][ T7173] bond0: (slave bond_slave_1): Releasing backup interface
[  238.017585][ T7184] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.108238][ T7173] team0: Port device team_slave_0 removed
[  238.206775][ T7173] team0: Port device team_slave_1 removed
[  238.237681][ T7173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.280524][ T7173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.322934][ T7173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.406514][ T7173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.925089][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.967403][ T7199] loop1: detected capacity change from 0 to 256
[  239.053415][ T7199] exfat: Deprecated parameter 'utf8'
[  239.110289][ T7199] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  239.299609][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.579318][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[  239.711304][ T7210] loop3: detected capacity change from 0 to 256
[  239.798920][ T7210] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  239.884079][ T7102] team0: Port device team_slave_0 added
[  239.927523][ T7210] ip_tables: iptables: counters copy to user failed while replacing table
[  240.013775][ T7102] team0: Port device team_slave_1 added
[  240.429232][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.485589][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.729162][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.128520][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.167264][ T7215] loop1: detected capacity change from 0 to 32768
[  241.174134][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.364083][ T7215] XFS (loop1): Mounting V5 Filesystem
[  241.423055][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.435355][ T7240] loop5: detected capacity change from 0 to 1024
[  241.477955][ T7215] XFS (loop1): Ending clean mount
[  241.638113][   T47] device hsr_slave_0 left promiscuous mode
[  241.650083][ T4288] Bluetooth: hci2: command 0x0419 tx timeout
[  241.717007][   T47] device hsr_slave_1 left promiscuous mode
[  241.766038][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.822502][ T4334] hfsplus: b-tree write err: -5, ino 3
[  241.840537][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.933862][ T4284] XFS (loop1): Unmounting Filesystem
[  241.967601][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.031808][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.046699][ T7259] sd 0:0:1:0: PR command failed: 1026
[  242.078047][ T7259] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  242.087756][   T47] device bridge_slave_1 left promiscuous mode
[  242.132785][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.142558][ T7259] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  242.206946][   T47] device bridge_slave_0 left promiscuous mode
[  242.258225][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.565372][   T47] device veth1_macvtap left promiscuous mode
[  242.591383][   T47] device veth0_macvtap left promiscuous mode
[  242.627915][   T47] device veth1_vlan left promiscuous mode
[  242.658185][   T47] device veth0_vlan left promiscuous mode
[  243.089754][ T7261] loop5: detected capacity change from 0 to 32768
[  243.152175][ T7261] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1020 (7261)
[  243.257738][ T7261] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  243.316061][ T7261] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  243.368133][ T7261] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  243.418380][ T7261] BTRFS info (device loop5): use zstd compression, level 3
[  243.472125][ T7261] BTRFS info (device loop5): using free space tree
[  243.594523][ T7261] BTRFS info (device loop5): enabling ssd optimizations
[  243.707607][ T7261] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4)
[  243.850822][ T7267] loop1: detected capacity change from 0 to 32768
[  243.937831][ T7267] JBD2: Ignoring recovery information on journal
[  243.956638][ T5069] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  244.100878][ T7267] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  244.549227][ T4284] ocfs2: Unmounting device (7,1) on (node local)
[  244.694183][ T7290] loop5: detected capacity change from 0 to 512
[  244.773741][ T7290] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  244.829973][ T7290] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.069176][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  245.498288][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1027'.
[  245.635405][   T47] team0 (unregistering): Port device team_slave_1 removed
[  245.696711][   T47] team0 (unregistering): Port device team_slave_0 removed
[  245.756836][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.825139][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.995984][   T47] bond0 (unregistering): Released all slaves
[  247.191437][ T7255] tap0: tun_chr_ioctl cmd 1074025677
[  247.197006][ T7255] tap0: linktype set to 776
[  247.313713][ T7102] device hsr_slave_0 entered promiscuous mode
[  247.414160][ T4288] Bluetooth: hci4: command 0x0406 tx timeout
[  247.479791][ T7102] device hsr_slave_1 entered promiscuous mode
[  247.520314][ T7102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.589135][ T7102] Cannot create hsr debugfs directory
[  247.596041][ T7319] loop5: detected capacity change from 0 to 512
[  247.669953][ T7319] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  247.895618][ T7319] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1041: bg 0: block 104: invalid block bitmap
[  248.051242][ T7319] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  248.106851][ T7319] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1041: invalid indirect mapped block 1 (level 1)
[  248.145077][ T7331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1037'.
[  248.237852][ T7319] EXT4-fs (loop5): 1 truncate cleaned up
[  248.300016][ T7319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  248.668627][ T7102] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  248.693292][ T7337] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13
[  248.711930][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  248.774506][ T7102] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  248.887383][ T7341] 9pnet: p9_errstr2errno: server reported unknown error 
[  248.924079][ T7102] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  249.002070][ T7102] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  249.250902][   T26] audit: type=1400 audit(1790056538.205:28): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7344 comm="syz.1.1052" name="p" offset=64
[  249.514340][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.664943][ T7102] 8021q: adding VLAN 0 to HW filter on device team0
[  249.755675][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.792141][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.827408][ T7365] ip_tables: iptables: counters copy to user failed while replacing table
[  249.854706][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  249.893869][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  249.957975][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.965184][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.077586][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  250.118056][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  250.155493][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.162720][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.185579][ T7372] input: syz1 as /devices/virtual/input/input14
[  250.329099][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  250.372645][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  250.432880][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  250.543423][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  250.646916][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  250.677224][ T7377] loop5: detected capacity change from 0 to 256
[  250.727934][ T7102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  250.876018][ T7102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  250.962871][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  251.027036][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  251.125322][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  251.184600][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  251.215756][ T7385] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15
[  251.241515][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  251.301825][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  251.380493][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  251.472547][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  252.289128][ T7402] loop3: detected capacity change from 0 to 512
[  252.414597][ T7402] EXT4-fs (loop3): 1 orphan inode deleted
[  252.430226][ T5158] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  252.508752][ T7402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  252.532989][ T5158] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1
[  252.620601][ T7402] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.753595][ T7414] loop5: detected capacity change from 0 to 7
[  252.770192][ T4262] Dev loop5: unable to read RDB block 7
[  252.839936][ T4262]  loop5: unable to read partition table
[  252.845724][ T4262] loop5: partition table beyond EOD, truncated
[  252.945842][ T7414] Dev loop5: unable to read RDB block 7
[  252.988933][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.997236][ T7414]  loop5: unable to read partition table
[  253.028086][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  253.036156][ T7414] loop5: partition table beyond EOD, truncated
[  253.047760][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  253.109057][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.129937][ T7414] loop_reread_partitions: partition scan of loop5 (ъщѓеЎ™‰ьЌѕCкjМ–гўP=ГЅ?г}X‹єР	њлЬ%х«`ЙжЦЂщ…€{н©Цђ�Иµ4FLQkЭЉ) failed (rc=-5)
[  253.262541][ T3638] Dev loop5: unable to read RDB block 7
[  253.268160][ T3638]  loop5: unable to read partition table
[  253.350777][ T3638] loop5: partition table beyond EOD, truncated
[  253.826243][ T7434] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16
[  254.744935][ T7451] loop5: detected capacity change from 0 to 128
[  254.868025][ T7451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  254.975744][ T7451] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.130404][ T7451] fscrypt (loop5, inode 12): Unsupported encryption flags (0x10)
[  255.393498][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  255.416487][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  255.425951][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  255.573502][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.580037][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.626566][ T7102] device veth0_vlan entered promiscuous mode
[  255.679916][ T7288] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  255.694140][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  255.727901][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  255.778163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  255.848346][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  255.885237][ T7102] device veth1_vlan entered promiscuous mode
[  255.901242][ T7288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.003707][ T7288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  256.067008][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  256.104913][ T7288] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.114528][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  256.153893][ T7474] loop5: detected capacity change from 0 to 512
[  256.190496][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  256.198564][ T7288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.225798][ T7474] EXT4-fs: Ignoring removed nobh option
[  256.251428][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  256.259441][ T7288] usb 4-1: Product: syz
[  256.295993][ T7474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  256.305978][ T7288] usb 4-1: Manufacturer: syz
[  256.328453][ T7102] device veth0_macvtap entered promiscuous mode
[  256.339022][ T7288] usb 4-1: SerialNumber: syz
[  256.353440][ T7474] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  256.401433][ T7288] usb 4-1: selecting invalid altsetting 1
[  256.419077][ T7102] device veth1_macvtap entered promiscuous mode
[  256.484438][ T7474] EXT4-fs (loop5): orphan cleanup on readonly fs
[  256.496374][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  256.531036][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  256.544742][ T7474] EXT4-fs (loop5): 1 truncate cleaned up
[  256.573977][ T7474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  256.645248][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.743802][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.854747][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.936467][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.002435][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.019891][ T7288] usb 4-1: selecting invalid altsetting 1
[  257.037687][ T7288] cdc_ncm 4-1:1.0: bind() failure
[  257.076214][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.136688][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  257.145288][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.203566][ T6259] usb 4-1: USB disconnect, device number 4
[  257.268723][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  257.330933][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  257.404089][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.476843][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.509212][ T7491] loop5: detected capacity change from 0 to 1024
[  257.544332][ T7491] EXT4-fs: Ignoring removed orlov option
[  257.552573][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.609181][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.656205][ T7491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  257.690011][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.777356][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.881408][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.894459][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  257.937873][ T7491] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  257.984468][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  258.056409][ T7102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.133409][ T7102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.205875][ T7102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.298106][ T7102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.552186][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  258.750744][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.758606][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.918215][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  258.958602][ T7513] netlink: 'syz.5.1091': attribute type 10 has an invalid length.
[  259.059131][ T7513] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  259.165532][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.255399][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  259.300949][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  259.339785][ T7515] device bridge_slave_0 left promiscuous mode
[  259.372773][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.399081][ T7515] device bridge_slave_1 left promiscuous mode
[  259.425769][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.468483][ T7515] bond0: (slave bond_slave_0): Releasing backup interface
[  259.538450][ T7515] bond0: (slave bond_slave_1): Releasing backup interface
[  259.696911][ T7515] team0: Port device team_slave_0 removed
[  259.795553][ T7515] team0: Port device team_slave_1 removed
[  259.857750][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.894629][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.928783][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.962566][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.044255][ T7515] bond0: (slave netdevsim0): Releasing backup interface
[  260.100173][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.196147][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.306744][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.842625][ T7538] i2c i2c-0: new_device: Can't parse I2C address
[  261.356176][ T7554] loop4: detected capacity change from 0 to 512
[  261.498811][ T7554] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1105: corrupted inode contents
[  261.647623][ T7554] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  261.723704][ T7554] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1105: corrupted inode contents
[  261.830276][ T7554] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.1105: mark_inode_dirty error
[  261.897240][ T7554] EXT4-fs (loop4): 1 orphan inode deleted
[  261.949958][ T7554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  262.049962][ T7288] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  262.265061][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  262.290835][ T7288] usb 7-1: not running at top speed; connect to a high speed hub
[  262.338924][ T7288] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.420664][ T7288] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  262.489944][ T7288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.585580][ T7288] usb 7-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  262.784326][ T7579] loop4: detected capacity change from 0 to 22
[  262.847216][ T7579] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  262.984073][ T7579] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  263.178292][ T7288] uvcvideo 7-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[  263.241008][ T7288] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  263.310709][ T7288] uvcvideo 7-1:1.1: Failed to initialize the device (-5).
[  263.387269][ T7288] usb 7-1: USB disconnect, device number 2
[  263.427918][ T7561] loop1: detected capacity change from 0 to 40427
[  263.567937][ T7561] F2FS-fs (loop1): invalid crc value
[  263.657956][ T7561] F2FS-fs (loop1): Found nat_bits in checkpoint
[  263.968496][ T7561] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  264.150168][ T7561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  264.652040][ T4284] syz-executor: attempt to access beyond end of device
[  264.652040][ T4284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.785548][ T7616] loop5: detected capacity change from 0 to 128
[  265.744516][ T7630] input: syz0 as /devices/virtual/input/input18
[  266.636761][ T7621] loop6: detected capacity change from 0 to 32768
[  266.827444][ T7621] XFS (loop6): Mounting V5 Filesystem
[  266.975064][ T7621] XFS (loop6): Ending clean mount
[  267.358732][ T7102] XFS (loop6): Unmounting Filesystem
[  267.988023][ T7678] loop5: detected capacity change from 0 to 164
[  268.471382][ T6255] kernel write not supported for file /comedi4 (pid: 6255 comm: kworker/0:13)
[  268.576666][ T7688] loop5: detected capacity change from 0 to 1024
[  269.016568][ T7695] loop6: detected capacity change from 0 to 256
[  269.042834][ T4338] hfsplus: b-tree write err: -5, ino 25
[  269.048537][ T4338] hfsplus: b-tree write err: -5, ino 4
[  269.090762][ T7695] exfat: Deprecated parameter 'namecase'
[  269.134206][ T4338] hfsplus: b-tree write err: -5, ino 2
[  269.143769][ T7695] exfat: Deprecated parameter 'namecase'
[  269.275332][ T7695] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  269.983380][ T7719] program syz.1.1154 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  270.068081][ T7718] loop5: detected capacity change from 0 to 4096
[  270.214062][ T7718] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  271.939002][ T7753] loop3: detected capacity change from 0 to 512
[  272.048278][ T7753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  272.244613][ T7753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  272.323334][ T7753] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.761596][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  273.211968][ T7774] loop5: detected capacity change from 0 to 128
[  273.313713][ T7774] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  273.441441][ T7774] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  273.554179][ T7774] ext2 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.762468][ T7784] loop6: detected capacity change from 0 to 256
[  274.013380][ T5069] EXT4-fs (loop5): unmounting filesystem.
[  274.376140][ T7792] netlink: 'syz.6.1180': attribute type 12 has an invalid length.
[  274.436555][ T7792] netlink: 'syz.6.1180': attribute type 29 has an invalid length.
[  274.506649][ T7792] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1180'.
[  274.589915][ T7792] netlink: 'syz.6.1180': attribute type 1 has an invalid length.
[  274.633410][ T7792] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1180'.
[  275.086599][ T7800] loop5: detected capacity change from 0 to 2048
[  275.184458][ T7800] Alternate GPT is invalid, using primary GPT.
[  275.224537][ T7800]  loop5: p1 p2 p3
[  275.228314][ T7800] loop5: partition table partially beyond EOD, truncated
[  275.243805][ T7803] loop6: detected capacity change from 0 to 4096
[  275.299215][ T7803] EXT4-fs: inline encryption not supported
[  275.348120][ T4288] Bluetooth: hci1: unexpected cc 0x080f length: 90 > 1
[  275.444617][ T7803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  275.557189][ T7803] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  275.651757][ T7803] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  275.938250][ T7811] loop3: detected capacity change from 0 to 512
[  276.031499][ T7811] EXT4-fs: Ignoring removed mblk_io_submit option
[  276.153146][ T7811] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  276.233438][ T7811] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  276.302567][ T7811] EXT4-fs (loop3): orphan cleanup on readonly fs
[  276.931442][ T7815] loop5: detected capacity change from 0 to 131072
[  276.961891][ T7815] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[  276.969765][ T7815] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  276.978425][ T7815] F2FS-fs (loop5): Test dummy encryption mode enabled
[  276.986450][ T7815] F2FS-fs (loop5): invalid crc value
[  277.018814][ T7815] F2FS-fs (loop5): Found nat_bits in checkpoint
[  277.045226][ T7815] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  277.059611][ T7815] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  277.069483][ T7815] F2FS-fs (loop5): Start checkpoint disabled!
[  277.095644][ T7815] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  277.102808][ T7815] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  277.133119][ T7811] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1187: Invalid block bitmap block 0 in block_group 0
[  277.266678][ T7811] Quota error (device loop3): write_blk: dquota write failed
[  277.306297][ T7102] EXT4-fs (loop6): unmounting filesystem.
[  277.345525][ T7811] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  277.484583][ T7811] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1187: Failed to acquire dquot type 1
[  277.652043][ T7811] EXT4-fs (loop3): 1 orphan inode deleted
[  277.659394][ T4338] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[  277.765541][ T4338] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1
[  277.866440][ T7811] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  278.223199][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  278.936386][ T7848] loop3: detected capacity change from 0 to 164
[  278.980106][ T6249] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  279.219923][ T6249] usb 2-1: Using ep0 maxpacket: 16
[  279.243222][ T6249] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  279.349758][ T6249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.410165][ T4288] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  279.418912][ T4288] Bluetooth: hci1: Injecting HCI hardware error event
[  279.429633][ T4275] Bluetooth: hci1: hardware error 0x00
[  279.463836][ T6249] usb 2-1: Product: syz
[  279.468030][ T6249] usb 2-1: Manufacturer: syz
[  279.494691][ T4288] Bluetooth: hci2: link tx timeout
[  279.500642][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.512274][ T4288] Bluetooth: hci2: link tx timeout
[  279.517409][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.526514][ T4288] Bluetooth: hci2: link tx timeout
[  279.531965][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.540299][ T4288] Bluetooth: hci2: link tx timeout
[  279.545429][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.553494][ T4288] Bluetooth: hci2: link tx timeout
[  279.558616][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.574458][ T4288] Bluetooth: hci2: link tx timeout
[  279.579613][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.590047][ T4288] Bluetooth: hci2: link tx timeout
[  279.595178][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.603203][ T4288] Bluetooth: hci2: link tx timeout
[  279.608339][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.619708][ T4288] Bluetooth: hci2: link tx timeout
[  279.624901][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.633040][ T4288] Bluetooth: hci2: link tx timeout
[  279.638167][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.646222][ T4288] Bluetooth: hci2: link tx timeout
[  279.651454][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.663095][ T4288] Bluetooth: hci2: link tx timeout
[  279.668967][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.680052][ T4288] Bluetooth: hci2: link tx timeout
[  279.685189][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.693273][ T4288] Bluetooth: hci2: link tx timeout
[  279.698405][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.706464][ T4288] Bluetooth: hci2: link tx timeout
[  279.711747][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.719732][ T4288] Bluetooth: hci2: link tx timeout
[  279.724918][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.733018][ T4288] Bluetooth: hci2: link tx timeout
[  279.738236][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.746393][ T4288] Bluetooth: hci2: link tx timeout
[  279.751612][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.759675][ T4288] Bluetooth: hci2: link tx timeout
[  279.764879][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.773638][ T4288] Bluetooth: hci2: link tx timeout
[  279.778763][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.786783][ T4288] Bluetooth: hci2: link tx timeout
[  279.792138][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.810093][ T4288] Bluetooth: hci2: link tx timeout
[  279.815332][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.823459][ T4288] Bluetooth: hci2: link tx timeout
[  279.828618][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.836724][ T4288] Bluetooth: hci2: link tx timeout
[  279.842040][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.850077][ T4288] Bluetooth: hci2: link tx timeout
[  279.855196][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.864350][ T4288] Bluetooth: hci2: link tx timeout
[  279.870159][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.888725][ T4288] Bluetooth: hci2: link tx timeout
[  279.894232][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.904999][ T4288] Bluetooth: hci2: link tx timeout
[  279.910225][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.918284][ T4288] Bluetooth: hci2: link tx timeout
[  279.923470][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.931566][ T4288] Bluetooth: hci2: link tx timeout
[  279.936702][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.944832][ T4288] Bluetooth: hci2: link tx timeout
[  279.950110][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.958301][ T4288] Bluetooth: hci2: link tx timeout
[  279.963473][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.971614][ T4288] Bluetooth: hci2: link tx timeout
[  279.977441][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.989258][ T4288] Bluetooth: hci2: link tx timeout
[  279.994690][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.002690][ T4288] Bluetooth: hci2: link tx timeout
[  280.007814][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.015857][ T4288] Bluetooth: hci2: link tx timeout
[  280.021176][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.045140][ T4288] Bluetooth: hci2: link tx timeout
[  280.051764][ T4288] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.070665][ T6249] usb 2-1: SerialNumber: syz
[  280.325351][ T6249] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  280.351752][ T7863] loop6: detected capacity change from 0 to 16
[  280.456908][ T6249] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  280.472296][ T7863] erofs: (device loop6): mounted with root inode @ nid 36.
[  280.560540][   T26] audit: type=1800 audit(1790056569.515:29): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1201" name="file1" dev="loop6" ino=86 res=0 errno=0
[  280.605861][ T6249] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  280.691715][ T6249] usb 2-1: media controller created
[  280.840090][ T6249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  280.986296][ T6249] zl10353_read_register: readreg error (reg=127, ret==-71)
[  281.160581][ T6249] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  281.269687][ T6249] usb 2-1: USB disconnect, device number 9
[  281.569916][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  281.797132][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  281.814682][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  281.824841][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  281.833614][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  281.841302][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  281.848526][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  282.139085][ T7892] loop6: detected capacity change from 0 to 512
[  282.224262][ T7892] EXT4-fs: Ignoring removed mblk_io_submit option
[  282.313913][ T7892] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  282.450218][ T4275] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  282.464672][ T7892] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  282.518847][ T7892] EXT4-fs (loop6): orphan cleanup on readonly fs
[  282.603397][ T7892] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1206: Invalid block bitmap block 0 in block_group 0
[  282.706918][ T7892] Quota error (device loop6): write_blk: dquota write failed
[  282.752866][ T7892] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  282.848200][ T7892] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1206: Failed to acquire dquot type 1
[  282.958862][ T7892] EXT4-fs (loop6): 1 orphan inode deleted
[  283.047876][ T4338] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5
[  283.085740][ T5158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.103276][ T4338] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1
[  283.188299][ T7892] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  283.223723][ T7884] chnl_net:caif_netlink_parms(): no params data found
[  283.538774][ T5158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.562427][ T7102] EXT4-fs (loop6): unmounting filesystem.
[  283.796176][ T5158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.889958][ T4275] Bluetooth: hci5: command 0x0409 tx timeout
[  284.156885][ T5158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.335678][ T7925] loop3: detected capacity change from 0 to 2048
[  284.472845][ T7925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  284.525462][ T7932] loop6: detected capacity change from 0 to 512
[  284.624801][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.705163][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.764189][ T7932] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  284.808539][ T7884] device bridge_slave_0 entered promiscuous mode
[  284.905318][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.938946][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  284.947507][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.968714][ T7945] loop5: detected capacity change from 0 to 2048
[  285.024620][ T7884] device bridge_slave_1 entered promiscuous mode
[  285.070241][ T6254] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  285.089220][ T7102] EXT4-fs (loop6): unmounting filesystem.
[  285.145085][ T7945] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  285.215990][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.260059][ T7945] UDF-fs: Scanning with blocksize 512 failed
[  285.321392][ T6254] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  285.347684][ T7945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.377457][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.398326][ T6254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.479551][ T6254] usb 2-1: config 0 descriptor??
[  285.561641][ T6254] cp210x 2-1:0.0: cp210x converter detected
[  285.626450][ T7884] team0: Port device team_slave_0 added
[  285.791069][ T7884] team0: Port device team_slave_1 added
[  285.847759][ T5158] tipc: Left network mode
[  285.955433][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.969962][ T4275] Bluetooth: hci5: command 0x041b tx timeout
[  285.990510][ T6254] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  286.010934][ T7957] input: syz1 as /devices/virtual/input/input19
[  286.048107][ T6254] usb 2-1: cp210x converter now attached to ttyUSB0
[  286.070040][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.243021][ T6254] usb 2-1: USB disconnect, device number 10
[  286.316795][ T6254] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  286.345958][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.395203][ T6254] cp210x 2-1:0.0: device disconnected
[  286.645887][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.699937][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.914147][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.192223][ T7953] loop3: detected capacity change from 0 to 32768
[  287.330670][ T7953] XFS (loop3): Mounting V5 Filesystem
[  287.414305][ T7985] loop5: detected capacity change from 0 to 16
[  287.475987][ T7953] XFS (loop3): Ending clean mount
[  287.510708][ T7985] erofs: (device loop5): mounted with root inode @ nid 36.
[  287.592905][ T7884] device hsr_slave_0 entered promiscuous mode
[  287.623633][   T26] audit: type=1800 audit(1790056576.575:30): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1229" name="file1" dev="loop5" ino=86 res=0 errno=0
[  287.677164][ T7884] device hsr_slave_1 entered promiscuous mode
[  287.760013][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  287.767633][ T7884] Cannot create hsr debugfs directory
[  287.958188][ T4272] XFS (loop3): Unmounting Filesystem
[  288.049993][ T4275] Bluetooth: hci5: command 0x040f tx timeout
[  290.135272][ T4275] Bluetooth: hci5: command 0x0419 tx timeout
[  290.391955][ T5158] device hsr_slave_0 left promiscuous mode
[  290.427384][ T5158] device hsr_slave_1 left promiscuous mode
[  290.464369][ T5158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.572828][ T5158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.628283][ T5158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.667901][ T8013] loop6: detected capacity change from 0 to 32768
[  290.674515][ T5158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.786194][ T8013] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1235 (8013)
[  290.815101][ T5158] device bridge_slave_1 left promiscuous mode
[  290.836386][ T8029] loop3: detected capacity change from 0 to 256
[  290.850106][ T5158] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.858423][ T5158] device bridge_slave_0 left promiscuous mode
[  290.917841][ T5158] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.951002][ T8013] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  290.997659][ T8029] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  291.110146][ T8013] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  291.119598][ T8013] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  291.246398][ T5158] device veth1_macvtap left promiscuous mode
[  291.286453][ T8013] BTRFS info (device loop6): use zstd compression, level 3
[  291.304610][ T5158] device veth0_macvtap left promiscuous mode
[  291.345024][ T8013] BTRFS info (device loop6): using free space tree
[  291.370082][ T5158] device veth1_vlan left promiscuous mode
[  291.375918][ T5158] device veth0_vlan left promiscuous mode
[  291.497637][ T8020] loop5: detected capacity change from 0 to 32768
[  291.541230][ T8013] BTRFS info (device loop6): enabling ssd optimizations
[  291.704838][ T8020] ialloc: diAlloc returned -28!
[  291.736434][ T8013] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4)
[  292.024109][ T7102] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  293.289546][ T5158] team0 (unregistering): Port device team_slave_1 removed
[  293.337566][ T5158] team0 (unregistering): Port device team_slave_0 removed
[  293.393540][ T5158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.453317][ T5158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.876619][ T5158] bond0 (unregistering): Released all slaves
[  294.026351][ T7884] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  294.088900][ T7884] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  294.143643][ T7884] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  294.177072][ T7884] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  294.382581][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.418957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.453540][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.475967][ T7884] 8021q: adding VLAN 0 to HW filter on device team0
[  294.525081][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.553680][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.581016][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.588131][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.629697][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  294.662276][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  294.685789][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  294.712870][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.719996][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.752895][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  294.800985][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  294.820633][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  294.857095][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  294.894670][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  294.920735][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  294.947944][ T7884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  294.982927][ T7884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.016372][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  295.047428][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.063359][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.096942][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.123499][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.146894][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.594154][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  295.624551][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  295.639769][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.386527][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  296.411408][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.449538][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.472384][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.493775][ T7884] device veth0_vlan entered promiscuous mode
[  296.511366][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.533118][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.555358][ T7884] device veth1_vlan entered promiscuous mode
[  296.605716][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  296.631301][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  296.655651][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  296.683389][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  296.709279][ T7884] device veth0_macvtap entered promiscuous mode
[  296.734623][ T7884] device veth1_macvtap entered promiscuous mode
[  296.779015][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.804480][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.828516][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.863585][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.891132][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.898740][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.924742][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.953941][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.984588][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  297.012529][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.090138][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.114486][ T7884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.139911][ T7884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.183940][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.202687][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  297.234526][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  297.246204][ T7884] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.274054][ T7884] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.300933][ T7884] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.309652][ T7884] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.486430][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.520522][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.548717][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  297.580471][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.598625][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.625350][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  299.308270][ T8159] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  299.988648][ T8168] loop1: detected capacity change from 0 to 4096
[  300.081357][ T8168] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  300.214381][ T8170] loop5: detected capacity change from 0 to 4096
[  300.368087][ T8170] ntfs3: loop5: Failed to load $Extend.
[  300.608965][ T8170] ntfs3: loop5: ino=1b, "file0" directory corrupted
[  302.809094][ T8229] ip_tables: iptables: counters copy to user failed while replacing table
[  302.872953][ T8216] sctp: [Deprecated]: syz.7.1275 (pid 8216) Use of struct sctp_assoc_value in delayed_ack socket option.
[  302.872953][ T8216] Use struct sctp_sack_info instead
[  303.336465][ T8235] loop6: detected capacity change from 0 to 512
[  303.439513][ T8235] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  303.675136][ T4338] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.964175][ T8240] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20
[  304.057251][ T4338] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.273492][ T4338] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.531608][ T4338] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.287850][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1297'.
[  305.811480][ T8281] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16)
[  305.863681][ T8284] loop7: detected capacity change from 0 to 1024
[  305.907850][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.920202][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.928140][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.936667][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.944252][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  305.951763][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  305.990798][ T8284] EXT4-fs: Ignoring removed orlov option
[  306.153410][ T8284] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  306.335649][ T8296] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  306.418168][ T8298] bonding: bond0 is being created...
[  306.607511][ T8298] bonding: bond0 already exists
[  306.907205][ T7884] EXT4-fs (loop7): unmounting filesystem.
[  307.396375][ T8315] loop3: detected capacity change from 0 to 128
[  307.490923][ T8315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  307.512815][ T8285] chnl_net:caif_netlink_parms(): no params data found
[  307.603626][ T8315] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  307.927007][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.970059][ T4275] Bluetooth: hci1: command 0x0409 tx timeout
[  308.030111][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.065647][ T8285] device bridge_slave_0 entered promiscuous mode
[  308.141464][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.153960][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.191441][ T8285] device bridge_slave_1 entered promiscuous mode
[  308.286365][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  308.584312][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.155569][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.364407][ T8285] team0: Port device team_slave_0 added
[  309.440685][ T8349] sctp: [Deprecated]: syz.3.1317 (pid 8349) Use of struct sctp_assoc_value in delayed_ack socket option.
[  309.440685][ T8349] Use struct sctp_sack_info instead
[  309.827796][ T8285] team0: Port device team_slave_1 added
[  310.035355][ T4338] device hsr_slave_0 left promiscuous mode
[  310.050074][ T4275] Bluetooth: hci1: command 0x041b tx timeout
[  310.101267][ T4338] device hsr_slave_1 left promiscuous mode
[  310.277141][ T8370] loop7: detected capacity change from 0 to 512
[  310.305309][ T4338] device veth1_macvtap left promiscuous mode
[  310.373932][ T4338] device veth0_macvtap left promiscuous mode
[  310.418252][ T8370] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  310.445662][ T4338] device veth1_vlan left promiscuous mode
[  310.490600][ T4338] device veth0_vlan left promiscuous mode
[  310.656664][ T7884] EXT4-fs (loop7): unmounting filesystem.
[  312.134840][ T4275] Bluetooth: hci1: command 0x040f tx timeout
[  312.369431][ T4338] bond0 (unregistering): Released all slaves
[  312.531009][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.577087][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.691376][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.726831][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.764082][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.940143][ T8394] loop3: detected capacity change from 0 to 512
[  312.979635][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.096037][ T8394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  313.179931][ T8394] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  313.329670][ T8285] device hsr_slave_0 entered promiscuous mode
[  313.388244][ T8285] device hsr_slave_1 entered promiscuous mode
[  313.446153][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.497222][ T8285] Cannot create hsr debugfs directory
[  313.581551][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  314.202505][ T8418] loop7: detected capacity change from 0 to 128
[  314.210187][ T4275] Bluetooth: hci1: command 0x0419 tx timeout
[  314.457831][ T8417] syz.7.1340: attempt to access beyond end of device
[  314.457831][ T8417] loop7: rw=2049, sector=138, nr_sectors = 6 limit=128
[  315.573703][ T8285] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  315.670779][ T8285] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  315.731624][ T8285] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  315.780891][ T8285] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  315.888274][ T8444] loop6: detected capacity change from 0 to 512
[  315.938088][ T8423] loop1: detected capacity change from 0 to 32768
[  316.084461][ T8444] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  316.102194][ T8423] XFS (loop1): Mounting V5 Filesystem
[  316.181013][ T8444] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.277226][ T8423] XFS (loop1): Ending clean mount
[  316.354781][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.514352][ T8285] 8021q: adding VLAN 0 to HW filter on device team0
[  316.578811][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  316.605168][ T7102] EXT4-fs (loop6): unmounting filesystem.
[  316.639711][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  316.782844][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  316.799471][ T4284] XFS (loop1): Unmounting Filesystem
[  316.901453][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  316.984695][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.991855][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.013445][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.019835][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.040245][ T5299] kernel write not supported for file /64/clear_refs (pid: 5299 comm: kworker/0:7)
[  317.112630][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  317.204096][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  317.274163][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.281331][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.373457][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  317.418592][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  317.515861][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  317.561622][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  317.610097][ T6254] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  317.639897][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  317.678249][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  317.713288][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  317.774515][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  317.824461][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  317.856763][ T8472] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20
[  317.918601][ T6254] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  317.931943][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  317.976610][ T6254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.993926][ T8285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  318.028102][ T6254] usb 7-1: Product: syz
[  318.039651][ T8285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  318.049594][ T8480] loop7: detected capacity change from 0 to 1024
[  318.061300][ T6254] usb 7-1: Manufacturer: syz
[  318.084877][ T6254] usb 7-1: SerialNumber: syz
[  318.122316][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.153383][ T8480] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  318.167889][ T6254] usb 7-1: config 0 descriptor??
[  318.180423][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.231846][ T6254] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  319.061666][ T6254] gspca_sunplus: reg_w_riv err -71
[  319.066863][ T6254] sunplus: probe of 7-1:0.0 failed with error -71
[  319.157192][ T6254] usb 7-1: USB disconnect, device number 3
[  319.249583][ T8501] loop3: detected capacity change from 0 to 64
[  319.282340][ T8500] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1363'.
[  319.353774][ T8501] hfs: unable to locate alternate MDB
[  319.359681][ T8501] hfs: continuing without an alternate MDB
[  319.391019][ T8500] sch_fq: defrate 678942120 ignored.
[  319.884446][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.978104][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.033479][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  322.090871][ T8563] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  322.098043][ T8563] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  322.203862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  322.243661][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  322.383864][ T8285] device veth0_vlan entered promiscuous mode
[  322.408288][ T8540] loop6: detected capacity change from 0 to 32768
[  322.485145][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  322.537256][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  322.602444][ T8540] ERROR: (device loop6): diAllocAG: numfree > numinos
[  322.602444][ T8540] 
[  322.624854][ T8285] device veth1_vlan entered promiscuous mode
[  322.684465][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  322.720935][ T8540] ERROR: (device loop6): remounting filesystem as read-only
[  322.728271][ T8540] ialloc: diAlloc returned -5!
[  322.760589][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  322.810475][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  322.972553][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  323.024320][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  323.129543][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  323.151672][ T8557] loop1: detected capacity change from 0 to 32768
[  323.191990][ T8285] device veth0_macvtap entered promiscuous mode
[  323.262470][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.285786][ T8557] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1381 (8557)
[  323.342923][ T8285] device veth1_macvtap entered promiscuous mode
[  323.489531][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.514689][ T8557] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  323.617692][ T8557] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  323.643664][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.720968][ T8557] BTRFS info (device loop1): using free space tree
[  323.770561][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.850694][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.982224][ T8557] BTRFS info (device loop1): enabling ssd optimizations
[  323.999554][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.064866][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.119528][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.194293][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  324.270574][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  324.361225][ T4284] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  324.382538][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.512703][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.599895][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.733314][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.840635][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.949901][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.048146][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.127746][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  325.216336][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  325.305271][ T8622] loop7: detected capacity change from 0 to 2048
[  325.333180][ T8285] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.419965][ T8285] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.428705][ T8285] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.499461][ T8622] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  325.553394][ T8622] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  325.647640][ T8285] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.123853][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.176600][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.297321][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  326.346660][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.402081][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.487737][ T7884] EXT4-fs (loop7): unmounting filesystem.
[  326.518156][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  327.889375][ T8672] loop1: detected capacity change from 0 to 64
[  328.713581][ T8690] loop5: detected capacity change from 0 to 1024
[  329.431052][ T8706] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1425'.
[  329.462505][ T8700] loop7: detected capacity change from 0 to 4096
[  330.004933][ T7288] kernel write not supported for file /snd/midiC2D0 (pid: 7288 comm: kworker/0:18)
[  330.439355][ T8727] rnbd_client L600: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0)
[  330.496652][    T7] kernel write not supported for file /ppp (pid: 7 comm: kworker/0:0)
[  330.544888][ T8727] rnbd_client L1255: Session s+ not found, and path parameter not given
[  330.915526][ T8740] loop1: detected capacity change from 0 to 1024
[  330.945281][ T8742] loop6: detected capacity change from 0 to 1024
[  331.063775][ T8742] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  331.406033][ T7102] EXT4-fs (loop6): unmounting filesystem.
[  331.837668][ T8759] loop3: detected capacity change from 0 to 512
[  331.995448][ T8759] EXT4-fs (loop3): 1 truncate cleaned up
[  332.040763][ T8759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  332.226214][ T8771] loop6: detected capacity change from 0 to 512
[  332.281698][ T8771] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  332.365681][ T8761] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21
[  332.390289][ T8745] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  332.584598][ T8759] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 936 with error 28
[  332.758652][ T8759] EXT4-fs (loop3): This should not happen!! Data will be lost
[  332.758652][ T8759] 
[  332.919404][ T8759] EXT4-fs (loop3): Total free blocks count 0
[  333.060841][ T8759] EXT4-fs (loop3): Free/Dirty block details
[  333.109905][ T8759] EXT4-fs (loop3): free_blocks=0
[  333.114913][ T8759] EXT4-fs (loop3): dirty_blocks=936
[  333.158386][ T8771] EXT4-fs (loop6): failed to open journal device unknown-block(0,8) -6
[  333.255995][ T8759] EXT4-fs (loop3): Block reservation details
[  333.339210][ T8759] EXT4-fs (loop3): i_reserved_data_blocks=936
[  333.756528][ T8789] kAFS: bad VL server IP address
[  333.774775][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  336.105184][ T8839] device-mapper: ioctl: Invalid ioctl structure: name c, dev 2
[  336.703575][ T8817] loop6: detected capacity change from 0 to 32768
[  336.846247][ T8817] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  336.941030][ T8860] loop5: detected capacity change from 0 to 256
[  337.095176][ T8863] loop3: detected capacity change from 0 to 256
[  337.232822][ T8863] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  337.319863][ T8845] ftl_cs: FTL header not found.
[  337.515424][ T8817] syz.6.1461 (8817) used greatest stack depth: 18624 bytes left
[  337.652056][ T8845] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65]
[  337.906947][ T7102] ocfs2: Unmounting device (7,6) on (node local)
[  338.148373][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1485'.
[  338.712471][ T8896] loop6: detected capacity change from 0 to 128
[  338.766884][ T8896] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  338.893806][ T8896] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  339.181219][ T8906] loop1: detected capacity change from 0 to 512
[  339.307794][ T8906] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  339.393292][ T8906] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1494: corrupted in-inode xattr
[  339.457185][ T4334] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  339.501741][ T8906] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1494: couldn't read orphan inode 15 (err -117)
[  339.645644][ T8906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  339.813868][ T8906] overlayfs: upper fs needs to support d_type.
[  339.839107][ T8919] loop7: detected capacity change from 0 to 256
[  340.208669][ T4284] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  340.273525][ T8895] loop5: detected capacity change from 0 to 32768
[  340.375391][ T8895] JBD2: Ignoring recovery information on journal
[  340.446820][ T8895] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  340.475888][ T4284] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  340.550375][ T8895] JBD2: bad block at offset 32
[  340.628364][ T8895] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  340.672272][ T4284] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  340.831724][ T4284] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  340.932307][ T8933] loop7: detected capacity change from 0 to 7
[  340.968159][ T8285] ocfs2: Unmounting device (7,5) on (node local)
[  340.991603][ T8111] Dev loop7: unable to read RDB block 7
[  341.007484][ T4284] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  341.039126][ T4334] loop: Write error at byte offset 2, length 3584.
[  341.063853][ T8111]  loop7: unable to read partition table
[  341.097778][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  341.107392][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  341.124624][ T8111] loop7: partition table beyond EOD, truncated
[  341.182772][ T8933] Dev loop7: unable to read RDB block 7
[  341.197003][ T4284] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  341.231430][ T8933]  loop7: unable to read partition table
[  341.251636][ T8933] loop7: partition table beyond EOD, truncated
[  341.306439][ T8933] loop_reread_partitions: partition scan of loop7 (ъщѓеЎ™‰ьЌѕCоjМ–гўP=ГЅ?г}X‹єР	њлЬ%х«`µ4FLQkЭЉ5) failed (rc=-5)
[  341.331086][ T4284] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  341.397917][ T3638] Dev loop7: unable to read RDB block 7
[  341.432485][ T3638]  loop7: unable to read partition table
[  341.460304][ T4284] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  341.483253][ T3638] loop7: partition table beyond EOD, truncated
[  341.627180][ T8924] loop6: detected capacity change from 0 to 32768
[  341.660412][ T4284] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  341.837298][ T8924] XFS (loop6): Mounting V5 Filesystem
[  341.876099][ T4284] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  342.072288][ T8924] XFS (loop6): Ending clean mount
[  342.127978][ T8956] loop5: detected capacity change from 0 to 128
[  342.215878][ T8924] XFS (loop6): Quotacheck needed: Please wait.
[  342.242457][ T8956] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  342.369179][ T8956] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  342.473142][ T8956] ext2 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.498214][ T8924] XFS (loop6): Quotacheck: Done.
[  342.981621][ T8285] EXT4-fs (loop5): unmounting filesystem.
[  342.993242][ T7102] XFS (loop6): Unmounting Filesystem
[  343.305264][ T8978] loop5: detected capacity change from 0 to 256
[  343.351356][ T4284] EXT4-fs (loop1): unmounting filesystem.
[  343.627736][ T4334] tipc: Left network mode
[  344.142056][ T8987] loop3: detected capacity change from 0 to 164
[  344.301998][ T8976] loop7: detected capacity change from 0 to 32768
[  344.465049][ T8976] ERROR: (device loop7): diAllocAG: numfree > numinos
[  344.465049][ T8976] 
[  344.576281][ T8976] ERROR: (device loop7): remounting filesystem as read-only
[  344.663973][ T8976] ialloc: diAlloc returned -5!
[  345.595537][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  345.607211][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  345.617054][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  345.624873][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  345.638465][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  345.660516][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  345.722705][ T9014] loop5: detected capacity change from 0 to 64
[  347.348944][ T4334] device hsr_slave_0 left promiscuous mode
[  347.428031][ T4334] device hsr_slave_1 left promiscuous mode
[  347.568386][ T9056] block2mtd: device name too long
[  347.585980][ T4334] device veth1_macvtap left promiscuous mode
[  347.622214][ T4334] device veth0_macvtap left promiscuous mode
[  347.668411][ T9058] input: syz0 as /devices/virtual/input/input22
[  347.679461][ T4334] device veth1_vlan left promiscuous mode
[  347.709380][ T4334] device veth0_vlan left promiscuous mode
[  347.740321][ T4275] Bluetooth: hci3: command 0x0409 tx timeout
[  347.999491][ T9062] loop7: detected capacity change from 0 to 512
[  349.016708][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1555'.
[  349.497542][ T9095] loop3: detected capacity change from 0 to 256
[  349.810005][ T4275] Bluetooth: hci3: command 0x041b tx timeout
[  350.955947][ T9100] loop6: detected capacity change from 0 to 32768
[  351.047199][ T9100] JBD2: Ignoring recovery information on journal
[  351.228353][ T9100] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  351.467817][   T26] audit: type=1800 audit(1790056640.415:31): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1562" name="file1" dev="loop6" ino=17059 res=0 errno=0
[  351.668223][ T7102] ocfs2: Unmounting device (7,6) on (node local)
[  351.890086][ T4275] Bluetooth: hci3: command 0x040f tx timeout
[  352.500664][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  352.701506][    T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  352.728574][    T7] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  352.748881][    T7] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  352.779507][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.846703][    T7] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[  352.907492][    T7] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[  353.206306][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.242563][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.263002][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.282664][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.302793][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.325085][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.343164][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.377336][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.396159][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.415511][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.438152][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.458983][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.492897][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.523530][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.536544][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.558126][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.569162][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.577718][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.589152][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.597914][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.609706][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.618644][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.629219][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.638040][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.648720][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.663226][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.674808][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.682943][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.695272][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.704926][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.716237][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.724109][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.736427][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.758640][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.781140][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.788716][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.801070][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.815613][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.824364][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.835201][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.844094][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.857982][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.868298][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.882252][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.901291][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.917004][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.926204][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.936893][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.945329][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.955824][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.964230][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.972001][ T4275] Bluetooth: hci3: command 0x0419 tx timeout
[  353.983792][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  353.993849][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.004262][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.014875][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.025654][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.034919][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.045203][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.054585][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.064769][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.073816][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.083519][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.094501][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.105168][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.116715][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.126675][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.137992][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.147713][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.156814][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.166755][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.175774][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.185565][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.194699][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.206793][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.218321][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.228563][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.237569][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.248161][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.257305][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.267150][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.276143][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.285879][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.297083][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.306852][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.319124][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.331646][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.339186][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.348976][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.358819][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.368603][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.379262][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.389053][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.398002][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.407686][ T6251] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0
[  354.437537][ T6251] hid-generic 0000:0000:0004.0005: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  354.488837][    T7] usb 6-1: USB disconnect, device number 5
[  354.537935][    T7] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  354.575443][    T7] spcp8x5 6-1:1.0: device disconnected
[  354.686844][ T9157] fido_id[9157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  354.770913][ T5299] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  354.783515][ T9161] input: syz0 as /devices/virtual/input/input23
[  354.999948][ T5299] usb 4-1: Using ep0 maxpacket: 32
[  355.017137][ T5299] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  355.056558][ T5299] usb 4-1: config 0 has no interface number 0
[  355.085399][ T5299] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  355.143137][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.169854][ T5299] usb 4-1: Product: syz
[  355.177559][ T9164] loop6: detected capacity change from 0 to 4096
[  355.197809][ T5299] usb 4-1: Manufacturer: syz
[  355.208003][ T5299] usb 4-1: SerialNumber: syz
[  355.246969][ T5299] usb 4-1: config 0 descriptor??
[  355.305565][ T5299] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  355.475785][ T5299] usb 4-1: qt2_attach - failed to power on unit: -71
[  355.515994][ T5299] quatech2: probe of 4-1:0.51 failed with error -71
[  355.569982][ T5299] usb 4-1: USB disconnect, device number 5
[  355.687416][ T9160] loop5: detected capacity change from 0 to 32768
[  355.777549][ T9160] JBD2: Ignoring recovery information on journal
[  355.918705][ T9160] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  356.118817][   T26] audit: type=1800 audit(1790056645.065:32): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1586" name="file1" dev="loop5" ino=17059 res=0 errno=0
[  356.265213][ T8285] ocfs2: Unmounting device (7,5) on (node local)
[  356.744089][ T4334] bond0 (unregistering): Released all slaves
[  356.830077][ T5299] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  356.872987][ T9121] tap0: tun_chr_ioctl cmd 35108
[  356.889001][ T9169] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1589'.
[  357.009911][ T5299] usb 6-1: Using ep0 maxpacket: 32
[  357.054508][ T5299] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  357.151134][ T5299] usb 6-1: config 0 has no interface number 0
[  357.196768][ T5299] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  357.287412][ T5299] usb 6-1: config 0 interface 85 has no altsetting 0
[  357.311970][ T9182] loop7: detected capacity change from 0 to 512
[  357.343121][ T9009] chnl_net:caif_netlink_parms(): no params data found
[  357.367023][ T5299] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  357.385026][ T9182] EXT4-fs: Ignoring removed bh option
[  357.429175][ T5299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.467781][ T9182] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  357.505482][ T5299] usb 6-1: Product: syz
[  357.533157][ T9182] EXT4-fs (loop7): 1 truncate cleaned up
[  357.544017][ T5299] usb 6-1: Manufacturer: syz
[  357.548654][ T5299] usb 6-1: SerialNumber: syz
[  357.574399][ T9182] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  357.619092][ T5299] usb 6-1: config 0 descriptor??
[  357.707577][ T9009] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.778276][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.826513][ T9009] device bridge_slave_0 entered promiscuous mode
[  357.876586][ T9009] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.916394][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.957718][ T9009] device bridge_slave_1 entered promiscuous mode
[  358.075188][ T9009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.143182][ T9009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.169437][ T7884] EXT4-fs (loop7): unmounting filesystem.
[  358.291516][ T5299] appletouch 6-1:0.85: Geyser mode initialized.
[  358.340738][ T5299] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input24
[  358.444059][ T9009] team0: Port device team_slave_0 added
[  358.473896][ T9197] loop7: detected capacity change from 0 to 512
[  358.509127][ T7288] usb 6-1: USB disconnect, device number 6
[  358.515482][    C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  358.570267][ T9009] team0: Port device team_slave_1 added
[  358.597567][ T9197] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  358.678737][ T7288] appletouch 6-1:0.85: input: appletouch disconnected
[  358.802183][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.809171][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.041967][ T9208] loop3: detected capacity change from 0 to 64
[  359.158965][ T9009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.385566][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.428108][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.654328][ T9213] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800
[  359.690994][ T9009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.756382][ T9213] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0
[  359.840645][ T9213] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  359.913785][ T9213] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0
[  360.020942][ T9213] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  360.063473][ T9009] device hsr_slave_0 entered promiscuous mode
[  360.093258][ T9213] page dumped because: unmovable page
[  360.126295][ T9213] page_owner tracks the page as allocated
[  360.155765][ T9009] device hsr_slave_1 entered promiscuous mode
[  360.184394][ T9213] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7884, tgid 7884 (syz-executor), ts 296890999879, free_ts 296845750434
[  360.324853][ T9213]  post_alloc_hook+0x173/0x1a0
[  360.346538][ T9213]  get_page_from_freelist+0x206b/0x2180
[  360.369425][ T9213]  __alloc_pages+0x1ec/0x4f0
[  360.384545][ T9213]  alloc_slab_page+0x5d/0x180
[  360.405347][ T9213]  new_slab+0x87/0x2d0
[  360.409514][ T9213]  ___slab_alloc+0xbc5/0x1240
[  360.431186][ T9213]  __kmem_cache_alloc_node+0x126/0x270
[  360.442086][ T9213]  __kmalloc_node_track_caller+0xa0/0x240
[  360.455752][ T9213]  __alloc_skb+0x226/0x7d0
[  360.471182][ T9213]  inet6_rt_notify+0xb0/0x240
[  360.483286][ T9213]  fib6_add+0x1e9a/0x3ed0
[  360.494824][ T9213]  ip6_route_add+0x86/0x130
[  360.506532][ T9213]  addrconf_permanent_addr+0x6d0/0xa30
[  360.525169][ T9213]  addrconf_notify+0x988/0xf60
[  360.541890][ T9213]  raw_notifier_call_chain+0xcb/0x160
[  360.554640][ T9213]  __dev_notify_flags+0x1a7/0x310
[  360.571307][ T9213] page last free stack trace:
[  360.583550][ T9213]  free_unref_page_prepare+0x8e5/0x9e0
[  360.595805][ T9213]  free_unref_page+0x2e/0x3f0
[  360.608560][ T9213]  __unfreeze_partials+0x188/0x1e0
[  360.627079][ T9213]  put_cpu_partial+0x17c/0x250
[  360.637408][ T9221] loop3: detected capacity change from 0 to 32768
[  360.646226][ T9213]  qlist_free_all+0x76/0xe0
[  360.652787][ T9213]  kasan_quarantine_reduce+0x144/0x160
[  360.671566][ T9221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1602 (9221)
[  360.693234][ T9213]  __kasan_slab_alloc+0x1e/0x80
[  360.706192][ T9213]  slab_post_alloc_hook+0x4b/0x490
[  360.722804][ T9213]  __kmem_cache_alloc_node+0x19d/0x270
[  360.745431][ T9221] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  360.761908][ T9213]  kmalloc_trace+0x26/0xe0
[  360.775563][ T9213]  load_elf_binary+0x1f64/0x2820
[  360.785979][ T9221] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  360.799336][ T9213]  bprm_execve+0xaf7/0x17e0
[  360.813444][ T9213]  do_execveat_common+0x501/0x6b0
[  360.823444][ T9221] BTRFS info (device loop3): setting nodatasum
[  360.834767][ T9213]  __x64_sys_execve+0x8e/0xa0
[  360.848567][ T9221] BTRFS info (device loop3): force zlib compression, level 3
[  360.859613][ T9213]  do_syscall_64+0x4c/0xa0
[  360.874674][ T9213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.884313][ T9221] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  360.911435][ T9009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  360.942195][ T9221] BTRFS info (device loop3): use lzo compression, level 0
[  360.954247][ T9009] Cannot create hsr debugfs directory
[  361.040128][ T9221] BTRFS info (device loop3): turning on flush-on-commit
[  361.047132][ T9221] BTRFS info (device loop3): enabling auto defrag
[  361.200478][ T9221] BTRFS info (device loop3): max_inline at 4096
[  361.206863][ T9221] BTRFS info (device loop3): using free space tree
[  361.497790][ T9221] BTRFS info (device loop3): enabling ssd optimizations
[  362.137071][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  362.169552][ T9009] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  362.284690][ T9263] 8021q: adding VLAN 0 to HW filter on device bond1
[  362.333920][ T9009] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  362.639941][ T9270] loop9: detected capacity change from 0 to 7
[  362.650853][ T8111] Dev loop9: unable to read RDB block 7
[  362.656458][ T8111]  loop9: unable to read partition table
[  362.663470][   T26] audit: type=1400 audit(1790056651.615:33): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=9268 comm="syz.6.1613" name="p" offset=74
[  362.727496][ T8111] loop9: partition table beyond EOD, truncated
[  362.935510][ T9009] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  362.974774][ T9270] Dev loop9: unable to read RDB block 7
[  363.025737][ T9270]  loop9: unable to read partition table
[  363.058174][ T9270] loop9: partition table beyond EOD, truncated
[  363.070730][ T9009] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  363.139324][ T9270] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5)
[  363.173941][ T9277] loop6: detected capacity change from 0 to 2048
[  363.679444][ T9009] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.802036][ T9284] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  363.819624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  363.862658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  363.968504][ T9009] 8021q: adding VLAN 0 to HW filter on device team0
[  364.046026][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  364.150485][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  364.226886][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.234078][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.324627][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  364.405211][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  364.503781][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  364.558225][ T9300] input: syz1 as /devices/virtual/input/input25
[  364.600940][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.608076][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.740142][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  364.801097][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  364.954859][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  364.995164][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  365.051522][ T9314] loop7: detected capacity change from 0 to 8
[  365.091160][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  365.187977][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  365.306072][ T9009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  365.317945][ T9314] SQUASHFS error: lzo decompression failed, data probably corrupt
[  365.398445][ T9314] SQUASHFS error: Failed to read block 0x82: -5
[  365.441786][ T9009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.479402][ T9314] SQUASHFS error: Unable to read metadata cache entry [80]
[  365.523602][ T9314] SQUASHFS error: Unable to read inode 0x11f
[  365.536737][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  365.561974][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  365.626757][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  365.667551][ T9325] loop6: detected capacity change from 0 to 2048
[  365.685550][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1626'.
[  365.712555][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  365.775141][ T9325] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  365.792383][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  365.892071][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  366.193271][ T7102] EXT4-fs (loop6): unmounting filesystem.
[  366.262627][ T9334] page:ffffea00012a0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804a800000 pfn:0x4a800
[  366.416620][ T9334] head:ffffea00012a0000 order:3 compound_mapcount:0 compound_pincount:0
[  366.524066][ T9342] loop6: detected capacity change from 0 to 256
[  366.539941][ T9334] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  366.588322][ T9334] raw: 00fff00000010200 ffffea00015b3608 ffffea0001526008 ffff888017441dc0
[  366.629742][ T9342] exfat: Deprecated parameter 'utf8'
[  366.674623][ T9334] raw: ffff88804a800000 000000000010000c 00000001ffffffff 0000000000000000
[  366.691145][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'.
[  366.747646][ T9342] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x82675e9d, utbl_chksum : 0xe619d30d)
[  366.783236][ T9334] page dumped because: unmovable page
[  366.824770][ T9334] page_owner tracks the page as allocated
[  366.867000][ T9334] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7884, tgid 7884 (syz-executor), ts 296890999879, free_ts 296845750434
[  367.125786][ T9334]  post_alloc_hook+0x173/0x1a0
[  367.165077][ T9334]  get_page_from_freelist+0x206b/0x2180
[  367.197492][ T9334]  __alloc_pages+0x1ec/0x4f0
[  367.239722][ T9334]  alloc_slab_page+0x5d/0x180
[  367.248183][ T9334]  new_slab+0x87/0x2d0
[  367.342061][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  367.349577][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  367.359146][ T9334]  ___slab_alloc+0xbc5/0x1240
[  367.375927][ T9334]  __kmem_cache_alloc_node+0x126/0x270
[  367.397797][ T9334]  __kmalloc_node_track_caller+0xa0/0x240
[  367.427339][ T9009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.462018][ T9334]  __alloc_skb+0x226/0x7d0
[  367.466506][ T9334]  inet6_rt_notify+0xb0/0x240
[  367.504797][ T9334]  fib6_add+0x1e9a/0x3ed0
[  367.509200][ T9334]  ip6_route_add+0x86/0x130
[  367.563751][ T9334]  addrconf_permanent_addr+0x6d0/0xa30
[  367.569307][ T9334]  addrconf_notify+0x988/0xf60
[  367.645736][ T9334]  raw_notifier_call_chain+0xcb/0x160
[  367.679949][ T9334]  __dev_notify_flags+0x1a7/0x310
[  367.685036][ T9334] page last free stack trace:
[  367.689735][ T9334]  free_unref_page_prepare+0x8e5/0x9e0
[  367.773270][ T9334]  free_unref_page+0x2e/0x3f0
[  367.778038][ T9334]  __unfreeze_partials+0x188/0x1e0
[  367.815797][ T9334]  put_cpu_partial+0x17c/0x250
[  367.874748][ T9334]  qlist_free_all+0x76/0xe0
[  367.879321][ T9334]  kasan_quarantine_reduce+0x144/0x160
[  367.920126][ T9334]  __kasan_slab_alloc+0x1e/0x80
[  367.925060][ T9334]  slab_post_alloc_hook+0x4b/0x490
[  367.984521][ T9334]  __kmem_cache_alloc_node+0x19d/0x270
[  368.002780][ T9334]  kmalloc_trace+0x26/0xe0
[  368.007270][ T9334]  load_elf_binary+0x1f64/0x2820
[  368.059516][ T9334]  bprm_execve+0xaf7/0x17e0
[  368.080129][ T9334]  do_execveat_common+0x501/0x6b0
[  368.085217][ T9334]  __x64_sys_execve+0x8e/0xa0
[  368.127951][ T9334]  do_syscall_64+0x4c/0xa0
[  368.177630][ T9334]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.176817][ T9394] overlayfs: conflicting lowerdir path
[  369.757570][ T9388] loop6: detected capacity change from 0 to 32768
[  369.926694][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  369.948504][ T9388] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  369.981581][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  370.163283][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  370.192618][ T9388] (syz.6.1648,9388,0):ocfs2_double_lock:1195 ERROR: status = -2
[  370.229551][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  370.314314][ T9388] (syz.6.1648,9388,0):ocfs2_rename:1304 ERROR: status = -2
[  370.339255][ T9009] device veth0_vlan entered promiscuous mode
[  370.360917][ T9388] (syz.6.1648,9388,0):ocfs2_rename:1694 ERROR: status = -2
[  370.381800][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  370.442464][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  370.558570][ T9009] device veth1_vlan entered promiscuous mode
[  370.718172][ T7102] ocfs2: Unmounting device (7,6) on (node local)
[  370.754975][ T9009] device veth0_macvtap entered promiscuous mode
[  370.865758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  370.904653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  370.965635][ T9419] loop3: detected capacity change from 0 to 164
[  371.020499][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  371.029073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  371.192230][ T9009] device veth1_macvtap entered promiscuous mode
[  371.231172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  371.283022][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  371.346715][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.482080][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.559302][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.629310][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.686578][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.744888][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.805417][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.855301][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.918238][ T9009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.998022][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  372.047395][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  372.121340][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.198287][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.257923][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.337973][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.413735][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.463829][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.507332][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.557178][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.617750][ T9009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.724421][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  372.802261][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  372.894762][ T9009] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.977932][ T9009] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.033816][ T9009] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.096207][ T9009] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.493846][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.586276][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.715819][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  373.777568][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.806644][ T9470] loop3: detected capacity change from 0 to 512
[  373.838996][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.943026][ T9473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.950855][ T9473] IPv6: NLM_F_CREATE should be set when creating new route
[  373.971751][ T9470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  374.105346][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  374.238215][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'.
[  374.273495][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  374.386247][ T9477] IPVS: Error joining to the multicast group
[  374.645804][ T9457] loop6: detected capacity change from 0 to 32768
[  374.793516][ T9457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1671 (9457)
[  374.938936][ T9457] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  375.047969][ T9457] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  375.162706][ T9457] BTRFS info (device loop6): setting nodatasum
[  375.168915][ T9457] BTRFS info (device loop6): force zlib compression, level 3
[  375.347747][ T9457] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  375.425055][ T9457] BTRFS info (device loop6): use lzo compression, level 0
[  375.459571][ T9501] loop8: detected capacity change from 0 to 16
[  375.498592][ T9457] BTRFS info (device loop6): turning on flush-on-commit
[  375.593232][ T9501] erofs: (device loop8): mounted with root inode @ nid 36.
[  375.610697][ T9457] BTRFS info (device loop6): enabling auto defrag
[  375.683435][ T9457] BTRFS info (device loop6): max_inline at 4096
[  375.689737][ T9457] BTRFS info (device loop6): using free space tree
[  375.694461][ T9501] erofs: (device loop8): z_erofs_readahead: readahead error at page 2 @ nid 89
[  375.872700][ T9501] erofs: (device loop8): z_erofs_readahead: readahead error at page 1 @ nid 89
[  375.956543][ T9457] BTRFS info (device loop6): enabling ssd optimizations
[  376.027250][ T9501] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 89
[  376.075301][ T9501] erofs: (device loop8): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89
[  376.210757][ T9501] erofs: (device loop8): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89
[  376.240631][ T9530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1688'.
[  376.261828][ T7102] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  376.307424][ T9501] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117]
[  376.378244][   T26] audit: type=1800 audit(1790056985.320:34): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1684" name="file2" dev="loop8" ino=89 res=0 errno=0
[  376.898085][ T8111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (8111)
[  378.457016][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.463996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  406.135197][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[  406.141309][ T4275] Bluetooth: hci5: command 0x0406 tx timeout
[  439.893784][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.900130][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  452.209966][ T4279] Bluetooth: hci1: command 0x0406 tx timeout
[  472.696297][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  501.337572][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.343956][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  527.569920][   T28] INFO: task jbd2/sda1-8:3600 blocked for more than 143 seconds.
[  527.584184][   T28]       Not tainted syzkaller #0
[  527.589204][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.598822][   T28] task:jbd2/sda1-8     state:D stack:25904 pid:3600  ppid:2      flags:0x00004000
[  527.616053][   T28] Call Trace:
[  527.619440][   T28]  <TASK>
[  527.624067][   T28]  __schedule+0x107f/0x4030
[  527.628725][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  527.636854][   T28]  ? release_firmware_map_entry+0x187/0x187
[  527.643679][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  527.649605][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  527.658435][   T28]  schedule+0xb9/0x180
[  527.663564][   T28]  io_schedule+0x7c/0xd0
[  527.667847][   T28]  bit_wait_io+0xd/0xc0
[  527.675227][   T28]  __wait_on_bit+0x9b/0x2c0
[  527.682514][   T28]  ? bit_wait+0xc0/0xc0
[  527.686723][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  527.695405][   T28]  ? bit_wait+0xc0/0xc0
[  527.699619][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  527.705439][   T28]  ? do_raw_write_lock+0x11a/0x260
[  527.713485][   T28]  ? bit_waitqueue+0x30/0x30
[  527.718112][   T28]  ? do_raw_read_unlock+0x39/0x70
[  527.727861][   T28]  jbd2_journal_commit_transaction+0x2f0f/0x5f30
[  527.738614][   T28]  ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0
[  527.746368][   T28]  ? lock_chain_count+0x20/0x20
[  527.754140][   T28]  ? _raw_spin_unlock+0x40/0x40
[  527.759027][   T28]  ? rcu_is_watching+0x11/0xa0
[  527.764928][   T28]  ? __timer_delete_sync+0x239/0x2e0
[  527.773361][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  527.778426][   T28]  ? timer_delete_sync+0x20/0x20
[  527.786156][   T28]  ? do_raw_read_unlock+0x70/0x70
[  527.794294][   T28]  ? prepare_to_wait+0x1a6/0x1f0
[  527.799273][   T28]  kjournald2+0x40b/0x800
[  527.804934][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  527.818777][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  527.825663][   T28]  ? wake_bit_function+0x200/0x200
[  527.837309][   T28]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  527.844673][   T28]  ? __kthread_parkme+0x71/0x1c0
[  527.852666][   T28]  ? __kthread_parkme+0x15b/0x1c0
[  527.857866][   T28]  kthread+0x29d/0x330
[  527.863186][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  527.868420][   T28]  ? kthread_blkcg+0xd0/0xd0
[  527.876003][   T28]  ret_from_fork+0x1f/0x30
[  527.881439][   T28]  </TASK>
[  527.886128][   T28] INFO: task syz-executor:4259 blocked for more than 143 seconds.
[  527.898595][   T28]       Not tainted syzkaller #0
[  527.904464][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.916560][   T28] task:syz-executor    state:D stack:21856 pid:4259  ppid:4258   flags:0x00004002
[  527.926903][   T28] Call Trace:
[  527.933039][   T28]  <TASK>
[  527.935992][   T28]  __schedule+0x107f/0x4030
[  527.945019][   T28]  ? mark_lock+0x94/0x320
[  527.949414][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  527.957914][   T28]  ? release_firmware_map_entry+0x187/0x187
[  527.964730][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  527.975687][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  527.981815][   T28]  schedule+0xb9/0x180
[  527.985913][   T28]  io_schedule+0x7c/0xd0
[  527.994669][   T28]  bit_wait_io+0xd/0xc0
[  527.998867][   T28]  __wait_on_bit+0x9b/0x2c0
[  528.004476][   T28]  ? bit_wait+0xc0/0xc0
[  528.008694][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  528.017709][   T28]  ? bit_wait+0xc0/0xc0
[  528.022960][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  528.027753][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  528.035825][   T28]  ? bit_waitqueue+0x30/0x30
[  528.041420][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  528.046646][   T28]  do_get_write_access+0x605/0xf20
[  528.058663][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  528.066088][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  528.075359][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  528.082460][   T28]  ? rcu_is_watching+0x11/0xa0
[  528.087264][   T28]  ext4_reserve_inode_write+0x201/0x290
[  528.097642][   T28]  __ext4_mark_inode_dirty+0x161/0x7b0
[  528.104179][   T28]  ext4_dirty_inode+0xbf/0x100
[  528.109517][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  528.118530][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  528.124606][   T28]  __file_update_time+0x21d/0x240
[  528.133119][   T28]  file_update_time+0x2f3/0x370
[  528.138018][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  528.144376][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  528.149453][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  528.158737][   T28]  ? count_memcg_event_mm+0x8a/0x3c0
[  528.168752][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  528.177329][   T28]  do_page_mkwrite+0x16b/0x5c0
[  528.183173][   T28]  wp_page_shared+0x167/0x370
[  528.187903][   T28]  handle_mm_fault+0x1b1b/0x3d40
[  528.197460][   T28]  ? mt_find+0x157/0x830
[  528.202802][   T28]  ? numa_migrate_prep+0x250/0x250
[  528.207945][   T28]  ? lock_chain_count+0x20/0x20
[  528.216736][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  528.223048][   T28]  do_user_addr_fault+0x58e/0xb20
[  528.228198][   T28]  exc_page_fault+0x60/0x100
[  528.235828][   T28]  asm_exc_page_fault+0x22/0x30
[  528.241874][   T28] RIP: 0033:0x7fcabc67c6e2
[  528.246329][   T28] RSP: 002b:00007ffdc092a0a0 EFLAGS: 00010202
[  528.255347][   T28] RAX: 00007fcaba574000 RBX: 000055555664e1e0 RCX: 0000000000000003
[  528.264262][   T28] RDX: 0000000000003d39 RSI: 000055555664ff38 RDI: 0000000000000008
[  528.278953][   T28] RBP: 00007ffdc092a5a0 R08: 000055555664ffa8 R09: 000000000000008c
[  528.288275][   T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdc092a3e0
[  528.303288][   T28] R13: 00007ffdc092a1d0 R14: 585858582e7a7973 R15: 00007ffdc092a120
[  528.311557][   T28]  </TASK>
[  528.314649][   T28] INFO: task syz.5.1689:9531 blocked for more than 144 seconds.
[  528.325823][   T28]       Not tainted syzkaller #0
[  528.331008][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  528.343243][   T28] task:syz.5.1689      state:D stack:27632 pid:9531  ppid:8285   flags:0x00004004
[  528.352904][   T28] Call Trace:
[  528.356198][   T28]  <TASK>
[  528.359141][   T28]  __schedule+0x107f/0x4030
[  528.367320][   T28]  ? mark_lock+0x94/0x320
[  528.372379][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  528.377445][   T28]  ? release_firmware_map_entry+0x187/0x187
[  528.389801][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  528.395778][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  528.405962][   T28]  schedule+0xb9/0x180
[  528.410316][   T28]  io_schedule+0x7c/0xd0
[  528.414583][   T28]  bit_wait_io+0xd/0xc0
[  528.418770][   T28]  __wait_on_bit+0x9b/0x2c0
[  528.427218][   T28]  ? bit_wait+0xc0/0xc0
[  528.431666][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  528.437149][   T28]  ? bit_wait+0xc0/0xc0
[  528.444935][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  528.450801][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  528.455857][   T28]  ? bit_waitqueue+0x30/0x30
[  528.464678][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  528.470203][   T28]  do_get_write_access+0x605/0xf20
[  528.475387][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  528.485015][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  528.495028][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  528.506827][   T28]  ? rcu_is_watching+0x11/0xa0
[  528.511913][   T28]  ext4_reserve_inode_write+0x201/0x290
[  528.517501][   T28]  __ext4_mark_inode_dirty+0x161/0x7b0
[  528.526698][   T28]  ext4_dirty_inode+0xbf/0x100
[  528.531884][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  528.537806][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  528.546479][   T28]  __file_update_time+0x21d/0x240
[  528.551868][   T28]  file_update_time+0x2f3/0x370
[  528.556842][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  528.565884][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  528.571647][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  528.576706][   T28]  ? pte_alloc_one+0x287/0x310
[  528.585186][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  528.591765][   T28]  do_page_mkwrite+0x16b/0x5c0
[  528.596562][   T28]  handle_mm_fault+0x199c/0x3d40
[  528.610082][   T28]  ? mt_find+0x157/0x830
[  528.614397][   T28]  ? numa_migrate_prep+0x250/0x250
[  528.619532][   T28]  ? lock_chain_count+0x20/0x20
[  528.629731][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  528.635070][   T28]  do_user_addr_fault+0x58e/0xb20
[  528.643782][   T28]  exc_page_fault+0x60/0x100
[  528.648410][   T28]  ? clear_bhb_loop+0x60/0xb0
[  528.653407][   T28]  asm_exc_page_fault+0x22/0x30
[  528.658285][   T28] RIP: 0033:0x7f0dc266baa3
[  528.666304][   T28] RSP: 002b:00007ffcc9bd30a0 EFLAGS: 00010246
[  528.672671][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b30164000
[  528.684340][   T28] RDX: 0000001b30124000 RSI: 0000000000400000 RDI: 00007f0dc29e0708
[  528.693886][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  528.708639][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  528.724935][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcc9bd3330
[  528.733920][   T28]  </TASK>
[  528.737014][   T28] INFO: task syz.7.1690:9533 blocked for more than 144 seconds.
[  528.748480][   T28]       Not tainted syzkaller #0
[  528.753805][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  528.766016][   T28] task:syz.7.1690      state:D stack:27632 pid:9533  ppid:7884   flags:0x00004004
[  528.777632][   T28] Call Trace:
[  528.784557][   T28]  <TASK>
[  528.787514][   T28]  __schedule+0x107f/0x4030
[  528.792472][   T28]  ? mark_lock+0x94/0x320
[  528.796835][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  528.805503][   T28]  ? release_firmware_map_entry+0x187/0x187
[  528.813449][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  528.819405][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  528.829578][   T28]  schedule+0xb9/0x180
[  528.836210][   T28]  io_schedule+0x7c/0xd0
[  528.844538][   T28]  bit_wait_io+0xd/0xc0
[  528.848758][   T28]  __wait_on_bit+0x9b/0x2c0
[  528.859288][   T28]  ? bit_wait+0xc0/0xc0
[  528.867148][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  528.872879][   T28]  ? bit_wait+0xc0/0xc0
[  528.877071][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  528.885563][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  528.890856][   T28]  ? bit_waitqueue+0x30/0x30
[  528.895477][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  528.904441][   T28]  do_get_write_access+0x605/0xf20
[  528.911472][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  528.917494][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  528.927278][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  528.935749][   T28]  ? rcu_is_watching+0x11/0xa0
[  528.946541][   T28]  ext4_reserve_inode_write+0x201/0x290
[  528.952608][   T28]  __ext4_mark_inode_dirty+0x161/0x7b0
[  528.958104][   T28]  ext4_dirty_inode+0xbf/0x100
[  528.966515][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  528.972787][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  528.977867][   T28]  __file_update_time+0x21d/0x240
[  528.986627][   T28]  file_update_time+0x2f3/0x370
[  528.991738][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  528.997052][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  529.006048][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  529.013793][   T28]  ? pte_alloc_one+0x287/0x310
[  529.018602][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  529.028526][   T28]  do_page_mkwrite+0x16b/0x5c0
[  529.033540][   T28]  handle_mm_fault+0x199c/0x3d40
[  529.038521][   T28]  ? mt_find+0x157/0x830
[  529.047779][   T28]  ? numa_migrate_prep+0x250/0x250
[  529.055579][   T28]  ? lock_chain_count+0x20/0x20
[  529.064201][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  529.069620][   T28]  do_user_addr_fault+0x58e/0xb20
[  529.075048][   T28]  exc_page_fault+0x60/0x100
[  529.083263][   T28]  ? clear_bhb_loop+0x60/0xb0
[  529.088172][   T28]  asm_exc_page_fault+0x22/0x30
[  529.093576][   T28] RIP: 0033:0x7fc3a146baa3
[  529.098023][   T28] RSP: 002b:00007ffd15d231c0 EFLAGS: 00010246
[  529.107860][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30164000
[  529.117961][   T28] RDX: 0000001b30124000 RSI: 0000000000600000 RDI: 00007fc3a17e0708
[  529.129839][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  529.137844][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  529.149486][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd15d23450
[  529.159105][   T28]  </TASK>
[  529.168355][   T28] INFO: task syz.3.1692:9534 blocked for more than 144 seconds.
[  529.176845][   T28]       Not tainted syzkaller #0
[  529.185448][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  529.194457][   T28] task:syz.3.1692      state:D stack:27632 pid:9534  ppid:4272   flags:0x00004004
[  529.207196][   T28] Call Trace:
[  529.210801][   T28]  <TASK>
[  529.213746][   T28]  __schedule+0x107f/0x4030
[  529.223931][   T28]  ? mark_lock+0x94/0x320
[  529.228341][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  529.233741][   T28]  ? release_firmware_map_entry+0x187/0x187
[  529.243436][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  529.249382][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  529.255803][   T28]  schedule+0xb9/0x180
[  529.265002][   T28]  io_schedule+0x7c/0xd0
[  529.269290][   T28]  bit_wait_io+0xd/0xc0
[  529.276359][   T28]  __wait_on_bit+0x9b/0x2c0
[  529.284406][   T28]  ? bit_wait+0xc0/0xc0
[  529.288593][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  529.294359][   T28]  ? bit_wait+0xc0/0xc0
[  529.298708][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  529.307019][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  529.312262][   T28]  ? bit_waitqueue+0x30/0x30
[  529.316878][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  529.327821][   T28]  do_get_write_access+0x605/0xf20
[  529.335169][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  529.344777][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  529.351342][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  529.357610][   T28]  ? rcu_is_watching+0x11/0xa0
[  529.365997][   T28]  ext4_reserve_inode_write+0x201/0x290
[  529.373152][   T28]  __ext4_mark_inode_dirty+0x161/0x7b0
[  529.378649][   T28]  ext4_dirty_inode+0xbf/0x100
[  529.389352][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  529.395738][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  529.404390][   T28]  __file_update_time+0x21d/0x240
[  529.409456][   T28]  file_update_time+0x2f3/0x370
[  529.416704][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  529.427306][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  529.432730][   T28]  ? pte_alloc_one+0x287/0x310
[  529.437631][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  529.447688][   T28]  do_page_mkwrite+0x16b/0x5c0
[  529.452698][   T28]  handle_mm_fault+0x199c/0x3d40
[  529.457664][   T28]  ? mt_find+0x157/0x830
[  529.465896][   T28]  ? numa_migrate_prep+0x250/0x250
[  529.471269][   T28]  ? lock_chain_count+0x20/0x20
[  529.476170][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  529.486498][   T28]  do_user_addr_fault+0x58e/0xb20
[  529.495708][   T28]  exc_page_fault+0x60/0x100
[  529.504079][   T28]  ? clear_bhb_loop+0x60/0xb0
[  529.508795][   T28]  asm_exc_page_fault+0x22/0x30
[  529.514047][   T28] RIP: 0033:0x7f48a706baa3
[  529.518502][   T28] RSP: 002b:00007ffde1b79530 EFLAGS: 00010246
[  529.529986][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000
[  529.538010][   T28] RDX: 0000001b2fa24000 RSI: 0000000000600000 RDI: 00007f48a73e0708
[  529.549008][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  529.558185][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  529.569197][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde1b797c0
[  529.578344][   T28]  </TASK>
[  529.584286][   T28] INFO: task syz.8.1693:9539 blocked for more than 145 seconds.
[  529.594231][   T28]       Not tainted syzkaller #0
[  529.599196][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  529.613872][   T28] task:syz.8.1693      state:D stack:27632 pid:9539  ppid:9009   flags:0x00004004
[  529.624680][   T28] Call Trace:
[  529.629618][   T28]  <TASK>
[  529.635560][   T28]  __schedule+0x107f/0x4030
[  529.641153][   T28]  ? mark_lock+0x94/0x320
[  529.645534][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  529.654970][   T28]  ? release_firmware_map_entry+0x187/0x187
[  529.661899][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  529.667830][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  529.676188][   T28]  schedule+0xb9/0x180
[  529.681462][   T28]  io_schedule+0x7c/0xd0
[  529.685738][   T28]  bit_wait_io+0xd/0xc0
[  529.692852][   T28]  __wait_on_bit+0x9b/0x2c0
[  529.697383][   T28]  ? bit_wait+0xc0/0xc0
[  529.703946][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  529.709468][   T28]  ? bit_wait+0xc0/0xc0
[  529.717231][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  529.725280][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  529.735888][   T28]  ? bit_waitqueue+0x30/0x30
[  529.741432][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  529.746708][   T28]  do_get_write_access+0x605/0xf20
[  529.755017][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  529.761999][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  529.768197][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  529.777477][   T28]  ? rcu_is_watching+0x11/0xa0
[  529.783312][   T28]  ext4_reserve_inode_write+0x201/0x290
[  529.788891][   T28]  __ext4_mark_inode_dirty+0x161/0x7b0
[  529.797588][   T28]  ext4_dirty_inode+0xbf/0x100
[  529.803415][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  529.809256][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  529.819481][   T28]  __file_update_time+0x21d/0x240
[  529.826406][   T28]  file_update_time+0x2f3/0x370
[  529.838171][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  529.844494][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  529.853122][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  529.858211][   T28]  ? pte_alloc_one+0x287/0x310
[  529.863999][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  529.873233][   T28]  do_page_mkwrite+0x16b/0x5c0
[  529.878036][   T28]  handle_mm_fault+0x199c/0x3d40
[  529.884026][   T28]  ? mt_find+0x157/0x830
[  529.888319][   T28]  ? numa_migrate_prep+0x250/0x250
[  529.903047][   T28]  ? lock_chain_count+0x20/0x20
[  529.908026][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  529.913817][   T28]  do_user_addr_fault+0x58e/0xb20
[  529.918921][   T28]  exc_page_fault+0x60/0x100
[  529.928853][   T28]  ? clear_bhb_loop+0x60/0xb0
[  529.936264][   T28]  asm_exc_page_fault+0x22/0x30
[  529.946558][   T28] RIP: 0033:0x7f000bc6baa3
[  529.951249][   T28] RSP: 002b:00007ffdd8df7be0 EFLAGS: 00010246
[  529.957342][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2e364000
[  529.968998][   T28] RDX: 0000001b2e324000 RSI: 0000000000600000 RDI: 00007f000bfe0708
[  529.978453][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  529.990219][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  529.998223][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd8df7e70
[  530.009390][   T28]  </TASK>
[  530.013624][   T28] INFO: task syz.6.1691:9540 blocked for more than 145 seconds.
[  530.027175][   T28]       Not tainted syzkaller #0
[  530.036856][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  530.049460][   T28] task:syz.6.1691      state:D stack:27632 pid:9540  ppid:7102   flags:0x00004004
[  530.066750][   T28] Call Trace:
[  530.070642][   T28]  <TASK>
[  530.073610][   T28]  __schedule+0x107f/0x4030
[  530.078161][   T28]  ? mark_lock+0x94/0x320
[  530.086312][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  530.091627][   T28]  ? release_firmware_map_entry+0x187/0x187
[  530.097596][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  530.107409][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  530.112941][   T28]  schedule+0xb9/0x180
[  530.117197][   T28]  io_schedule+0x7c/0xd0
[  530.125237][   T28]  bit_wait_io+0xd/0xc0
[  530.129462][   T28]  __wait_on_bit+0x9b/0x2c0
[  530.134285][   T28]  ? bit_wait+0xc0/0xc0
[  530.145258][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  530.151483][   T28]  ? bit_wait+0xc0/0xc0
[  530.155673][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  530.164081][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  530.169156][   T28]  ? bit_waitqueue+0x30/0x30
[  530.176065][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  530.185156][   T28]  do_get_write_access+0x605/0xf20
[  530.190563][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  530.196611][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  530.206399][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  530.212949][   T28]  ? rcu_is_watching+0x11/0xa0
[  530.217767][   T28]  ext4_reserve_inode_write+0x201/0x290
[  530.227044][   T28]  __ext4_mark_inode_dirty+0x161/0x7b0
[  530.232949][   T28]  ext4_dirty_inode+0xbf/0x100
[  530.237767][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  530.248826][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  530.255726][   T28]  __file_update_time+0x21d/0x240
[  530.264835][   T28]  file_update_time+0x2f3/0x370
[  530.269966][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  530.275296][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  530.286047][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  530.293521][   T28]  ? pte_alloc_one+0x287/0x310
[  530.298350][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  530.308636][   T28]  do_page_mkwrite+0x16b/0x5c0
[  530.313676][   T28]  handle_mm_fault+0x199c/0x3d40
[  530.318843][   T28]  ? mt_find+0x157/0x830
[  530.326825][   T28]  ? numa_migrate_prep+0x250/0x250
[  530.332259][   T28]  ? lock_chain_count+0x20/0x20
[  530.337149][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  530.348196][   T28]  do_user_addr_fault+0x58e/0xb20
[  530.353492][   T28]  exc_page_fault+0x60/0x100
[  530.358144][   T28]  ? clear_bhb_loop+0x60/0xb0
[  530.368094][   T28]  asm_exc_page_fault+0x22/0x30
[  530.375662][   T28] RIP: 0033:0x7f3bc8e6baa3
[  530.384420][   T28] RSP: 002b:00007ffdbe6e9300 EFLAGS: 00010246
[  530.392736][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2f464000
[  530.404342][   T28] RDX: 0000001b2f424000 RSI: 0000000000600000 RDI: 00007f3bc91e0708
[  530.412609][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  530.424164][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  530.432484][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdbe6e9590
[  530.444090][   T28]  </TASK>
[  530.448946][   T28] 
[  530.448946][   T28] Showing all locks held in the system:
[  530.457692][   T28] 4 locks held by kworker/u4:1/11:
[  530.466474][   T28]  #0: ffff8880192ba138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  530.479248][   T28]  #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  530.495681][   T28]  #2: ffff88807e7960e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  530.507805][   T28]  #3: ffff88807e798c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  530.522596][   T28] 1 lock held by rcu_tasks_kthre/12:
[  530.527936][   T28]  #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  530.544253][   T28] 1 lock held by rcu_tasks_trace/13:
[  530.551551][   T28]  #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  530.566385][   T28] 1 lock held by khungtaskd/28:
[  530.571522][   T28]  #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  530.586748][   T28] 2 locks held by getty/4028:
[  530.592202][   T28]  #0: ffff88814d24c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  530.606136][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  530.618449][   T28] 3 locks held by syz-executor/4259:
[  530.627679][   T28]  #0: ffff88807cbe08d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  530.638090][   T28]  #1: ffff88807e796558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  530.653423][   T28]  #2: ffff88807e79a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  530.664174][   T28] 3 locks held by syz.5.1689/9531:
[  530.669349][   T28]  #0: ffff888027b8b5d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  530.683422][   T28]  #1: ffff88807e796558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  530.698348][   T28]  #2: ffff88807e79a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  530.713036][   T28] 3 locks held by syz.7.1690/9533:
[  530.718189][   T28]  #0: ffff888027b8ea58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  530.733826][   T28]  #1: ffff88807e796558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  530.745382][   T28]  #2: ffff88807e79a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  530.761302][   T28] 3 locks held by syz.3.1692/9534:
[  530.766485][   T28]  #0: ffff88801746cc58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  530.779050][   T28]  #1: ffff88807e796558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  530.792852][   T28]  #2: ffff88807e79a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  530.804427][   T28] 3 locks held by syz.8.1693/9539:
[  530.809570][   T28]  #0: ffff88802cf65b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  530.823819][   T28]  #1: ffff88807e796558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  530.834627][   T28]  #2: ffff88807e79a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  530.849510][   T28] 3 locks held by syz.6.1691/9540:
[  530.857435][   T28]  #0: ffff88802cf62e58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  530.871071][   T28]  #1: ffff88807e796558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  530.882534][   T28]  #2: ffff88807e79a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  530.894566][   T28] 
[  530.896915][   T28] =============================================
[  530.896915][   T28] 
[  530.907389][   T28] NMI backtrace for cpu 0
[  530.911774][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  530.918980][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  530.929091][   T28] Call Trace:
[  530.932393][   T28]  <TASK>
[  530.935341][   T28]  dump_stack_lvl+0x188/0x24e
[  530.940060][   T28]  ? irq_work_queue+0xb8/0x140
[  530.944966][   T28]  ? show_regs_print_info+0x12/0x12
[  530.950188][   T28]  ? load_image+0x410/0x410
[  530.954896][   T28]  ? vprintk_emit+0x59f/0x6a0
[  530.959641][   T28]  ? printk_sprint+0x460/0x460
[  530.964437][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[  530.969401][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  530.975572][   T28]  ? _printk+0xda/0x130
[  530.979749][   T28]  ? load_image+0x410/0x410
[  530.984358][   T28]  ? load_image+0x410/0x410
[  530.988881][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  530.994958][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  531.001120][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  531.007119][   T28]  watchdog+0xf0e/0xf50
[  531.011374][   T28]  ? watchdog+0x1ed/0xf50
[  531.016229][   T28]  kthread+0x29d/0x330
[  531.020336][   T28]  ? hungtask_pm_notify+0x40/0x40
[  531.025384][   T28]  ? kthread_blkcg+0xd0/0xd0
[  531.030090][   T28]  ret_from_fork+0x1f/0x30
[  531.034534][   T28]  </TASK>
[  531.056388][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  531.063762][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  531.070979][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  531.083089][   T28] Call Trace:
[  531.086408][   T28]  <TASK>
[  531.089361][   T28]  dump_stack_lvl+0x188/0x24e
[  531.094079][   T28]  ? memcpy+0x3c/0x60
[  531.098076][   T28]  ? show_regs_print_info+0x12/0x12
[  531.103412][   T28]  ? load_image+0x410/0x410
[  531.107963][   T28]  panic+0x2d3/0x710
[  531.111885][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  531.117541][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  531.122076][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  531.127664][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  531.133840][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  531.140045][   T28]  watchdog+0xf4d/0xf50
[  531.144221][   T28]  ? watchdog+0x1ed/0xf50
[  531.148570][   T28]  kthread+0x29d/0x330
[  531.152670][   T28]  ? hungtask_pm_notify+0x40/0x40
[  531.157714][   T28]  ? kthread_blkcg+0xd0/0xd0
[  531.162325][   T28]  ret_from_fork+0x1f/0x30
[  531.166796][   T28]  </TASK>
[  531.170130][   T28] Kernel Offset: disabled
[  531.174481][   T28] Rebooting in 86400 seconds..